The PDPL in Saudi Arabia: Supporting Your Organisation’s Journey to Compliance

The Personal Data Protection Law (PDPL) has been recently amended by Royal Decree No. M/148 dated 05/09/1444H (corresponding to 27/03/2023G) and came into force on September 14, 2023. It applies to the processing of the personal data of individuals in the Kingdom and to processing by any entity outside the Kingdom in respect of personal data subjects inside the Kingdom. A one-year grace period comes to an end in September 2024. 

The Saudi Data & Artificial Intelligence Authority (SDAIA) also issued an updated version of the Artificial Intelligence Ethics Framework in September. The aim is to establish a principle-based ethical framework for the development and use of AI technologies in the Kingdom.

During this event for the in-house legal community, the panellists will discuss building a pragmatic compliance program, with reference to the PDPL, the Implementing Regulation and the Regulation on Personal Data Transfer outside the Geographical Boundaries of the Kingdom. They will also briefly consider the convergence and inherent conflict between evolving global privacy and AI regulations and consider who in the organisation should take ownership of AI ethics.

Additionally, there will be an opportunity to network with other in-house colleagues & friends.