What Is the Saudi Anti-Cyber Crime Law?
Saudi Arabia's Anti-Cyber Crime Law was enacted to combat digital offences, protect information security, and safeguard public order and morals in the online space. The law applies to everyone in the Kingdom, including expatriates, and covers activities conducted on computers, smartphones, and any connected information network.
The law is enforced by the Bureau of Investigation and Public Prosecution, with technical support provided by the Communications and Information Technology Commission (CITC). Penalties range from fines and short prison terms to multi-year sentences depending on the severity of the offence.
---
Why Expats Must Take This Law Seriously
Many expatriates arrive in Saudi Arabia without realising that online behaviour considered harmless at home — such as sharing satirical content, using VPNs, or forwarding messages — can result in criminal prosecution under Saudi law. Unlike traffic violations, cyber crime convictions can lead to:
- Imprisonment ranging from one to ten years
- Fines of up to five million Saudi riyals
- Permanent confiscation of devices and equipment
- Deportation following completion of a sentence
- Website or account shutdowns
---
Key Offences Under the Law
The law categorises offences by severity, with corresponding penalty tiers:
Tier 1 – Up to 1 Year and/or SAR 500,000 Fine
- Unlawfully spying on, intercepting, or receiving data transmitted through an information network
- Illegally accessing others' accounts, systems, or stored data without permission
Tier 2 – Up to 3 Years and/or SAR 2,000,000 Fine
- Online fraud — acquiring property or financial instruments through deception
- Gaining unauthorised access to bank accounts or financial data
Tier 3 – Up to 4 Years and/or SAR 3,000,000 Fine
- Accessing systems with the intent to delete, damage, alter, leak, or destroy data
- Disrupting or impairing information networks
Tier 4 – Up to 5 Years and/or SAR 3,000,000 Fine
- Producing, transmitting, or storing content that violates public order, religious values, or public morals
- This includes content shared on WhatsApp, social media, or email
Tier 5 – Up to 10 Years and/or SAR 5,000,000 Fine
- Building or promoting websites linked to terrorist organisations
- Facilitating communication between terrorist groups online
---
Aggravating Factors That Increase Penalties
Under Article 8, the minimum sentence cannot be less than half of the maximum if any of the following apply:
- The crime was committed as part of organised criminal activity
- The offender is a public official and the crime relates to their position
- The offender used their employer's systems to commit the offence
This is particularly relevant for expats working in government roles, financial institutions, or technology companies.
---
Attempting or Assisting a Cyber Crime
- Attempting a cyber crime carries a penalty of up to half the maximum for the completed offence (Article 10)
- Assisting, inciting, or collaborating with someone to commit a cyber crime can result in the full maximum penalty if the crime is successfully carried out (Article 9)
Forwarding a problematic message, sharing a link, or helping someone set up an account used for illegal purposes could expose you to serious liability.
---
Practical Tips for Expats
- Think before you share: Forwarding content on WhatsApp or social media that criticises religion, the government, or public morals is a criminal act
- Avoid unlicensed VPNs: Using a VPN to bypass content restrictions may fall under unlawful network interference
- Secure your accounts: If someone uses your device or account to commit an offence, you may face scrutiny
- Report crimes early: Article 11 allows courts to reduce or waive penalties for offenders who report a crime to authorities before it is discovered or before damage occurs
- Keep work and personal use separate: Using your employer's systems for personal activities — especially anything legally questionable — can trigger aggravated penalties
---
What Happens to Your Devices?
Under Article 13, courts may confiscate equipment, software, and devices used in committing a cyber crime, even if the device belongs to a third party acting in good faith. Websites and service platforms can also be permanently shut down.
---
Final Takeaway
Saudi Arabia enforces its cyber crime law actively and the consequences for expats are severe. When in doubt about whether online activity is permissible, err on the side of caution and seek legal advice from a licensed Saudi attorney.