PDPL
Personal Data Protection Law (Saudi Arabia)
- Jurisdiction
- Saudi Arabia · SA
- In force since
- 14 September 2024
- Supervisory authority
- SDAIA
Who it applies to
Processing personal data of people in Saudi Arabia, including by entities outside the Kingdom.
Documents it requires
- Privacy policy
Rights it grants
- Access a copy of their data
- Correct inaccurate data
- Have their data deleted
- Withdraw consent at any time
Cookies and consent
Nothing non-essential may load before the visitor agrees. Analytics and marketing scripts must be blocked until then — a banner that only informs is not enough.
What we are watching in Oriente Medio
These are the changes our update engine tracks for this market. When one takes effect, the documents it affects are regenerated and republished — you do not have to notice it yourself.
- PDPL (Arabia Saudí)14 September 2024
Personal Data Protection Law: consentimiento, registro de tratamientos y reglas de transferencia transfronteriza en Arabia Saudí.
See what your site is actually missing
Paste your URL. We fetch the live page, detect the trackers, payments and AI calls that really ship to visitors, and tell you which documents and consent you need. No signup.
No signup · result in seconds
PDPL for your kind of product
- PDPL for a SaaS
- PDPL for a marketplace
- PDPL for an online store
- PDPL for a mobile app
- PDPL for an AI chatbot
- PDPL for an AI image generator
- PDPL for an AI writing tool
- PDPL for a fintech app
- PDPL for a health app
- PDPL for an education platform
- PDPL for a community platform
- PDPL for a newsletter
- PDPL for a booking site
- PDPL for a portfolio site
This page is an engineering summary of publicly available regulatory requirements, generated from LexVibe's framework registry — not legal advice. Every framework links to its official text so you can check it yourself. For decisions about your own compliance posture, consult the primary sources and a lawyer qualified in the relevant jurisdiction.