SAUDI ARABIA Law and Practice Contributed by: Alex Saleh, Asad Ahmad, Shahad Al Humaidani and Khaled Al Khashab, GLA & Company
It is prohibited to bypass or deceive internet fil - tering or to provide the means to do so. In addi - tion, the Commission shall set the regulating controls and requirements. 5.5 Recent Developments There have been few significant changes to KSA’s data protection laws and regulations since 2023, with the primary framework still largely being governed by the PDPL, which was designed to align with international data protec - tion standards. Nevertheless, the most notable development in KSA’s data protection regime occurred on 14 September 2024 when the PDPL finally became fully enforceable, marking a significant milestone for businesses operating in KSA. This full enforcement deadline required organisations to ensure compliance with the law’s provisions, including implementing robust data protection measures, appointing data pro - tection officers and adhering to strict data trans - fer requirements.
While no further changes or material effects occurred or have been announced since the full enforcement date, the full implementation of the PDPL represents a critical step forwards in strengthening data privacy and security in KSA.
368 CHAMBERS.COM
Powered by FlippingBook