Wire · regulatory
SDAIA Consults on Extensive Amendments to the Saudi PDPL Implementing Regulation
◆ Sectors
◆ Geography
◆ Source
◆ Verified
Fusion42 · 16 October 2026 · Fusion42 review
Saudi Data and Artificial Intelligence Authority (SDAIA) has proposed extensive amendments to the Personal Data Protection Law Implementing Regulation (PDPL IRs), including a potential new data localisation requirement, enhanced privacy policy standards, lowered breach notification thresholds, and updated information security obligations. The public consultation is open until 5 November 2026, with implementation expected 60 days after publication of final amendments.
This Wire brief sits within Fusion42's coverage of Regtech.
◆ ◆ The Wire takeaway
You must prepare for a possible Saudi policy forcing data to be stored locally while allowing limited overseas transfers; your cross-border data handling will face urgent scrutiny and may require new infrastructure. Privacy policies and breach reporting will tighten, so review those immediately to avoid compliance gaps.
◆ Coverage
1 source · 16 Oct 2026
◆ Related on Wire
◆ Topics