Overview
Saudi Personal Data Protection Law (KSA PDPL) Article 42 defines the mandatory timeline for issuing the Implementing Regulations of the Personal Data Protection Law. The president of the Competent Authority must publish these Regulations within 720 days from the date the Law is officially issued. The Article also requires coordination with key ministries and national authorities to ensure the Regulations align with national cybersecurity, technology, foreign affairs, health, and financial sector considerations.
This coordinated approach ensures that PDPL implementation is unified, consistent, and aligned with Saudi Arabia’s broader regulatory, operational, and national security priorities.
Saudi PDPL Article 42
The president of the Competent Authority shall issue the Regulations within a period not exceeding (seven hundred and twenty) days commencing on the date of publishing the Law provided that the president must coordinate before issuing the Law with: (Ministry of Communications and Information Technology, Ministry of Foreign Affairs, Communications, Space & Technology Commission, Digital Government Authority, National Cybersecurity Authority, Saudi Health Council, and Saudi Central Bank), each in its own jurisdiction.
Explanation of Saudi PDPL Article 42
SDAIA Must Publish PDPL Regulations
This provision states that the president of the Competent Authority must issue the PDPL Implementing Regulations within a maximum of 720 days after the Law is published. This establishes a fixed and legally binding timeframe for releasing the official rules that guide PDPL compliance.
The Article also requires the president to coordinate with several government ministries and national authorities before issuing the Regulations. These include entities responsible for communications, foreign affairs, digital governance, cybersecurity, health, technology, and financial stability. Their collective input ensures that the Regulations reflect national priorities and sector-specific requirements, supporting a harmonized application of the PDPL across the Kingdom.
