Overview
General Rules for Secondary Use of Data – Second: Scope explains where the Rules for Secondary Use of Data apply, clarifying the types of data sharing requests that fall under the framework. It outlines government-to-government, government-to-private, and private-to-government sharing scenarios that support public interest, research, development, and innovation. It also confirms that these Rules operate without overriding other legal or regulatory requirements.
SDAIA's Official Text
The text below reproduces official PDPL law, regulation, or guideline issued by the Saudi Data & AI Authority, verified against the original SDAIA source. No changes or reinterpretation applied.
Second: Scope
The application of these Rules shall not prejudice any legal provisions or regulatory requirements set forth in another document or relevant statutory instrument. These Rules shall apply to the following:The exceptions provided under Paragraphs (2) and (3) of Article 1 of the Policy shall apply to these Rules.
- Data sharing requests between government entities for the purposes of serving the public interest or fostering research, development, and innovation.
- Data sharing requests submitted by government entities to private entities for the purposes of serving the public interest.
- Data sharing requests submitted by private entities to government entities for the purposes of fostering research, development, and innovation.
Plain-Language Explanation
The explanation below is provided to help you understand the SDAIA’s legal text and does not replace or override the official PDPL law, regulation, or guideline.
Legal Framework Applicability
These Rules apply alongside other legal and regulatory requirements. They do not override or conflict with any laws or regulatory obligations referenced in other documents or statutory instruments.
Government-to-Government Requests
Government-to-Private Requests
The Rules apply when a government entity asks a private entity for data. These requests must be made specifically for purposes that serve the public interest.
Private-to-Government Requests
The Rules also apply to cases where private entities request data from government entities. These requests must support research, development, or innovation activities.
