Data Protection and Privacy 2025

SAUDI ARABIA

Iraq

Jordan

Iran

Kuwait

Qatar

Riyadh

Saudi Arabia

U.A.E.

Law and Practice Contributed by: Alex Saleh, Asad Ahmad, Shahad Al Humaidani and Khaled Al Khashab GLA & Company

Sudan

Yemen

Contents 1. Legal and Regulatory Framework p.357 1.1 Overview of Data and Privacy-Related Laws p.357 1.2 Regulators p.358 1.3 Enforcement Proceedings and Fines p.358 1.4 Data Protection Fines in Practice p.358 1.5 AI Regulation p.359 1.6 Interplay Between AI and Data Protection Regulations p.360

2. Privacy Litigation p.360 2.1 General Overview p.360 2.2 Recent Case Law p.360 2.3 Collective Redress Mechanisms p.361 3. Data Regulation on IoT Providers, Data Holders and Data Processing Services p.361 3.1 Objectives and Scope of Data Regulation p.361 3.2 Interaction of Data Regulation and Data Protection p.362 3.3 Rights and Obligations Under Applicable Data Regulation p.362 3.4 Regulators and Enforcement p.364

4. Sectoral Issues p.364 4.1 Use of Cookies p.364 4.2 Personalised Advertising and Other Online Marketing Practices p.364 4.3 Employment Privacy Law p.365 4.4 Transfer of Personal Data in Asset Deals p.365 5. International Considerations p.365

5.1 Restrictions on International Data Transfers p.365 5.2 Government Notifications and Approvals p.366 5.3 Data Localisation Requirements p.367 5.4 Blocking Statutes p.367 5.5 Recent Developments p.368

354 CHAMBERS.COM

Powered by