SDAIA Updates Rules for Personal Data Transfers Outside Saudi Arabia

The Saudi Data and Artificial Intelligence Authority (SDAIA) has introduced amendments to the regulations governing the transfer of personal data outside Saudi Arabia. These updates aim to clarify detailed provisions and procedures, ensuring a high level of data protection and safeguarding privacy for individuals in other countries.

SDAIA, which oversees the implementation of these regulations, has made changes in several key areas. The amendments include new standards for assessing the protection level of personal data when transferred abroad, guidelines for data transfers to foreign entities, and specific scenarios where exemptions from compliance with protection standards may apply.

The updated regulation also addresses the risks associated with transferring or disclosing personal data to external parties and the conditions under which exemptions can be waived.