Overview
SDAIA's Official Text
The text below reproduces official PDPL law, regulation, or guideline issued by the Saudi Data & AI Authority, verified against the original SDAIA source. No changes or reinterpretation applied.
First: Definitions
Except as otherwise provided in Paragraphs (2) and (3) of this Article, the terms and phrases used herein shall have the meanings ascribed to them in the Data Sharing Policy issued by the Saudi Data AI Authority ( as well as the meanings ascribed to them in Article (1) of the Personal Data Protection Law and its amendments. The following terms and phrases, wherever mentioned, shall have the meanings assigned thereto, unless the context requires otherwise:
- Secondary Use of Data: The utilization of data for purposes other than those for which it was initially collected, including its processing in activities pertaining to research, development, or innovation, and the operations and activities conducted by government entities in pursuit of public interest objectives.
- Data Sharing Entity for Secondary Use of Data: The entity to which a data sharing request is submitted, whether a government or private entity, for the purposes of secondary use of data.
- Applicant: The entity submitting a data sharing request to the entity from which data sharing is requested, whether a government or private entity, for the purposes of secondary use of data.
- Policy: The Data Sharing Policy issued by the Saudi Data AI Authority (SDAIA).
Plain-Language Explanation
The explanation below is provided to help you understand the SDAIA’s legal text and does not replace or override the official PDPL law, regulation, or guideline.
Defined Terms Applied
The section explains that all terms follow the meanings found in SDAIA’s Data Sharing Policy and the definitions in Article 1 of the Saudi Personal Data Protection Law. The terms below apply unless a different meaning is explicitly required.
Secondary Use Explained
Secondary use refers to using data for a different purpose than the one for which it was originally collected. It includes research, development, innovation activities, as well as operations carried out by government entities to achieve public interest goals.
Receiving Entity Role
A Data Sharing Entity for Secondary Use is any government or private entity that receives a request for data sharing for secondary use. It is the organization responsible for evaluating and responding to the request.
Applicant Defined
The Applicant is the party submitting the data sharing request. It can be a government or private entity seeking access to data for secondary use purposes.
Policy Reference
The term “Policy” refers specifically to SDAIA’s Data Sharing Policy. This policy provides the foundational rules that complement and support the definitions used in these Rules.
