Saudi Arabia Personal Data Protection Law

The data privacy landscape is complex and it continues to evolve. It presents many challenges to organisations by creating uncertainty on many levels about whether, how, and when to process personal data.

In September 2021 the authorities of Saudi Arabia issued the Personal Data Protection Law (PDPL), which set stricter standards for data privacy and protection and further increased awareness around the importance of data protection compliance.

In March 2023 the updates to the PDPL were adopted and in April 2023 the updated PDPL was published. The PDPL came into force on 14 September 2023. However it will become fully enforceable starting from 14 September 2024. Until this date organisations have time (grace period) to take necessary steps to achieve their compliance with the new legal requirements.

 

security picto red

Assess your ability to comply with the Law

We have developed a self-assessment for organisations to determine their maturity against the PDPPL requirements. Powered by our Digital Trust Manager: Assess platform, the tool uses business intelligence and data visualisation to identify where your organisation currently stands, and provides clear recommendations of where you should focus on.

Qatar Data Protection Law 1

Results dashboard
Clear visuals demonstrate current status versus the target maturity level.

Bespoke recommendations for improvement

Bespoke recommendations for improvement
Receive bespoke recommendations on how to progress from your current status to your target maturity level.

Start your data privacy compliance journey with our KSA Data Privacy handbook

The Data Privacy handbook is a toolkit that explains the key principles of data privacy and contains the resources to help you assess your current business processes against data privacy best practices and laws. This toolkit is suitable for all organisations processing personal data and looking for a practical approach to build their data privacy programmes, be it to comply with privacy regulations or to gain competitive advantage.

Download English version  حمل النسخة العربية

data privacy handbook egypt

Data privacy in a box - an easy implementation solution.



To support your data protection compliance journey towards meeting PDPPL’s requirements, the data privacy in a box solution contains a ready to use customisable template that you could quickly deploy.

  • Data protection policy
  • Privacy notice
  • Data owner rights policy
  • Record of processing register (RoPA)
  • Data protection impact assessment (DPIA) policy
  • Data protection impact assessment (DPIA) template
  • Breach policy
  • General data protection training material

In addition to the templates, we will include two hours of a subject matter expert to run a PDPPL in-depth training session and explanation of the templates for your key stakeholders.

Reach out to our team today to learn more

Contact the team

Speak to our local multidisciplinary team of data privacy experts to determine the best approach to managing data privacy in your organisation.

Required fields are marked with an asterisk(*)

By submitting your email address, you acknowledge that you have read the Privacy Statement and that you consent to our processing data in accordance with the Privacy Statement (including international transfers). If you change your mind at any time about wishing to receive the information from us, you can send us an email message using the Contact Us page.

Contact us

Phil Mennie

Phil Mennie

Partner, Digital Trust, PwC Middle East

Tel: +971 56 369 7736

Richard Chudzynski

Richard Chudzynski

Data Privacy and Protection Legal Leader, PwC Legal Middle East

Tel: +971 56 417 6591

Follow us