Regulation on Personal Data Transfer Outside the Kingdom Article 9 says that this Regulation becomes legally binding and enforceable on the day it is published in the Kingdom’s Official Gazette. From that point forward, all Controllers and Processors subject to the PDPL must fully comply with its provisions regarding the cross-border transfer of personal data.
Regulation on Personal Data Transfer Outside the Kingdom Article 9
The Regulation shall enter into force on the date of its publication in the Official
Gazette.