Category · Q&A index

Data Protection

Saudi Arabia Personal Data Protection Law (PDPL): consent, lawful processing, breach notification, cross-border transfer.

Governing law: FDL-45-2021

30DAYS
Mandatory breach notification deadline
EXPLICIT
Consent required for personal data processing
RESTRICTED
Cross-border data transfer rules apply
SPECIAL
Health and biometric data heavily protected

Start here

I want to know if companies need my permission to collect data

Learn about Saudi Arabia's consent requirements for personal data collection, what constitutes valid consent, and when companies can process your information legally under PDPL.

My data was compromised—what are my rights?

Understand your rights following a data breach in Saudi Arabia, notification timelines companies must follow, and steps you can take to protect yourself and file complaints.

1 question

Can my data be sent outside Saudi Arabia?

Discover the rules governing cross-border data transfers, restrictions on sending your data abroad, and what safeguards must be in place under Saudi data protection law.

5 answered questions

My data was compromised—what are my rights?

Provisional0 views
Data Breach in Saudi Arabia: Your Rights & Notifications?
Companies must notify SDAIA of data breaches under Article 13 of Saudi PDPL. Report non-compliance to SDAIA; penalties reach SAR 5,000,000.

Data Protection

Start here

I want to know if companies need my permission to collect data

My data was compromised—what are my rights?

Can my data be sent outside Saudi Arabia?

My data was compromised—what are my rights?

Other questions