Privacy Legislation:

Royal Decree No. 6 of 2022 Promulgating the Law on the Protection of Personal Data (‘the Data Protection Law’) entered into force, on 13 February 2023, a year after its publication in the Official Gazette No. 1429, on 13 February 2022. In particular, the Data Protection Law consists of 32 articles which bring the country’s legislative regime into closer alignment with global data protection laws. More specifically, the Data Protection Law includes provisions that introduce data protection principles and data subject rights, instate the Ministry of Transport, Communications and Information Technology as the regulatory authority responsible for enforcement of the law, and repeal and replace Chapter 7 of the Electronic Transactions Law promulgated by Royal Decree No. 69 of 2008.

You can download the Data Protection Law, only available in Arabic, here.

Last Updated: Feb 2023