In brief As you may know, on 14 September 2023, the Personal Data Protection Law promulgated by Royal Decree No. M/19, dated 09/02/1443H, amended pursuant to Royal Decree No. M/148, dated 05/09/1444H (the “PDPL”), officially entered into force in the Kingdom of Saudi Arabia. While the PDPL came into force on 14 September 2023, organisations were afforded a further 12 Hijri months’ period from the date of entry into force to bring themselves into compliance…
In brief In September 2023, the Saudi Authority for Data and Artificial Intelligence (SDAIA) published the “AI Ethics Principles”, intending to support the Kingdom’s effort towards achieving its vision and national strategies related to adopting AI technology. SDAIA has analyzed global practices and developed the AI Ethics Principles to limit the negative implications of AI systems, help companies ensure the responsible use of those systems and protect the privacy of individuals and their rights concerning…
On 13 September 2023, the Communication Space & Technology Commission of Saudi Arabia (CST) proposed a draft law on Global Digital Content Safe Harbor (please find the draft law here). The proposed law is aimed at providing a legal framework for intermediary service providers hosting and transiting global digital content in the Kingdom of Saudi Arabia (KSA) in a way that ensures no objection, deletion or modification of content hosted in and accessible within the…
The law addresses for the first time the processing of personal data via autonomous and semi-autonomous systems In brief On 7 September 2023, the Dubai International Financial Centre (DIFC) enacted amendments to Data Protection Law No. 5 of 2020 (“DIFC Data Protection Law”) which came into force starting on 1 September 2023. These amendments were preceded by a 30-day public consultation launched by the DIFC in April 2023. The amendments are aimed at enhancing the…
In brief On 11 July 2023, the Saudi Authority for Data and Artificial Intelligence (SDAIA) published two drafts of regulations to the Personal Data Protection Law promulgated by Royal Decree No. M/19, dated 09/02/1443H, amended pursuant to Royal Decree No. M/148, dated 05/09/1444H (PDPL). The drafts were published for public consultation and will be open to public commentary until 31 July 2023. While the drafts are not binding, they do provide helpful insights with regards…