{"publisher":"Cicada (cicadaconsultancy.online)","license":"https://creativecommons.org/licenses/by/4.0/","attribution":"Cite as: Cicada (cicadaconsultancy.online)","docs":"https://cicadaconsultancy.online/llms.txt","item":{"id":"pdpl-in-force-2023","event_date":"2023-09-14","published":"2026-10-03","category":"policy","importance":3,"title":{"en":"PDPL takes effect; full enforcement follows in September 2024","ar":"بدء نفاذ نظام حماية البيانات الشخصية تمهيداً لتطبيقه الكامل في سبتمبر 2024"},"summary":{"en":"The Saudi Data and Artificial Intelligence Authority (SDAIA) published the Implementing Regulations of the Personal Data Protection Law (PDPL) and the Personal Data Transfer Regulations on 7 September 2023, a week before the amended law took effect on 14 September 2023. Organizations received a 12-month grace period, and full enforcement began on 14 September 2024. The regulations require breach notification to SDAIA within 72 hours, responses to data-subject requests within 30 days, and explicit consent for sensitive data and automated decisions.","ar":"نشرت الهيئة السعودية للبيانات والذكاء الاصطناعي (سدايا) في 7 سبتمبر 2023 اللائحة التنفيذية لنظام حماية البيانات الشخصية ولائحة نقل البيانات الشخصية، قبل أسبوع من بدء نفاذ النظام المعدّل في 14 سبتمبر 2023. ومُنحت الجهات مهلة امتثال مدتها 12 شهراً، وبدأ التطبيق الكامل في 14 سبتمبر 2024. وتشترط اللوائح إبلاغ سدايا عن حوادث تسرب البيانات خلال 72 ساعة، والرد على طلبات أصحاب البيانات خلال 30 يوماً، والحصول على موافقة صريحة لمعالجة البيانات الحساسة واتخاذ القرارات الآلية."},"entities":["PDPL","SDAIA"],"figures":[{"label":"breach notification window (hours)","label_ar":"مهلة الإبلاغ عن الاختراق","value":72,"unit":"count"},{"label":"grace period (months)","label_ar":"مهلة الامتثال","value":12,"unit":"count"}],"sources":[{"url":"https://www.clydeco.com/en/insights/2023/09/saudi-arabia-issues-implementing-regulations","publisher":"Clyde & Co","title":"Saudi Arabia issues Implementing Regulations to the Personal Data Protection Law","published":null},{"url":"https://insightplus.bakermckenzie.com/bm/data-technology/saudi-arabia-new-amendments-have-been-introduced-to-the-personal-data-protection-law","publisher":"Baker McKenzie","title":"Saudi Arabia: New amendments have been introduced to the Personal Data Protection Law","published":null}],"verification":"verified","urls":{"en":"https://cicadaconsultancy.online/en/news/pdpl-in-force-2023","ar":"https://cicadaconsultancy.online/ar/news/pdpl-in-force-2023","markdown_en":"https://cicadaconsultancy.online/en/news/pdpl-in-force-2023.md","markdown_ar":"https://cicadaconsultancy.online/ar/news/pdpl-in-force-2023.md"},"image":"https://cicadaconsultancy.online/images/articles/pdpl-in-force-2023.jpg"}}