Saudi Arabia

النسخة الرقمية

Saudi Arabia designates 2026 as year of AI

Riyadh, March 10, 2026, SPA -- Saudi Arabia is emerging as a global hub for data and artificial intelligence under Vision 2030, driven by the support of His Royal Highness Prince Mohammed bin Salman bin Abdulaziz Al Saud, Crown Prince, Prime Minister, and Chairman of the Saudi Data and Artificial Intelligence Authority (SDAIA). The momentum was underscored by the Cabinet's approval today to designate 2026 as the Year of Artificial Intelligence in the Kingdom. Since its establishment in 2019, SDAIA has led the National Strategy for Data and Artificial Intelligence, which focuses on six pillars:

Türkiye and Saudi Arabia deepen strategic cooperation with new deals

Cumhurbaşkanı Recep Tayyip Erdoğan’ın Suudi Arabistan temaslarının ardından Türkiye ile Suudi Arabistan arasında ortak bildiri yayımlandı.

Saudi Press Agency source on AI governance

Official source record dated 21 February 2026 for Saudi Arabia concerning Saudi Arabia joins Saudi Arabia Joins Global Partnership on AI. See the linked spa.gov.sa source for the authoritative text, procedural context, and implementation details.

Saudi Data and AI Authority rules governing issuance of accreditation certificates for controllers and processors

SDAIA issued rules governing the issuance of Accreditation Certificates for Controllers and Processors, establishing a framework where an Accreditation Certificate serves as formal evidence of compliance with the Personal Data Protection Law.

Saudi Communications Minister discusses expanding cooperation on AI policy and technological innovation with White House advisors

Saudi Minister of Communications and Information Technology Eng. Abdullah Alswaha met with David Sacks, Senior Advisor to the White House on Artificial Intelligence and Digital Assets, during the Kingdom’s participation in the World Economic Forum in Davos. The meeting focused on advancing Saudi–U.S. cooperation in AI policy and technological innovation, in support of both countries’ ambitions to lead in advanced technologies. The discussions underscored the importance of strengthening the strategic partnership between the Kingdom of Saudi Arabia and the United States in priority technology ar

Saudi Arabia unveils world's largest government data centre in $2.7 billion digital push

Riyadh, January 02, 2026, SPA -- Saudi Arabia has joined the global race for massive data centers with the launch of the Hexagon Data Center in Riyadh, representing the world’s largest government data center, classified as Tier IV. The Hexagon Data Center aims to leverage advanced technologies to support the Kingdom’s developmental sectors, as data has become the primary driver of modern developmental change. These efforts are guided by the strategy of the Saudi Data and AI Authority (SDAIA) and Saudi Vision 2030, ensuring the Kingdom remains at the forefront of countries harnessing cutting-ed

Tahqaq link verification service

On 29 December 2025, the National Cybersecurity Authority (NCA) launched the Tahqaq service to enable individuals to verify the reliability of links before visiting them and to engage safely and proactively online. The NCA stated that the service allows the scanning of circulated links and helps reduce risks arising from suspicious links that may lead to unauthorised access to data. The Tahqaq service also provides cybersecurity guidance to users to reduce emerging cyber risks and strengthen ...

Non-CNI Private Sector Entities Cybersecurity Controls (NCNICC - 1:2025)

On 28 December 2025, the National Cybersecurity Authority (NCA) adopted the Non-CNI Private Sector Entities Cybersecurity Controls (NCNICC – 1:2025). The controls apply to private sector entities that are not operators of critical national infrastructure and are used as a mandatory reference for cybersecurity compliance within the Kingdom of Saudi Arabia. The document sets objectives, scope of work, applicability, implementation, compliance, and periodic update and review. It establishes mini...

Data governance framework in General Rules for Secondary Use of Data

On 25 December 2025, the Saudi Data and AI Authority (SDAIA) adopted the General Rules for Secondary Use of Data. They establish a data governance framework across government and private entities, defining scope, objectives, and mechanisms governing data-sharing requests, including controls for data classification levels and confidentiality of government data. The rules set out procedures for submitting, assessing, approving, or rejecting data-sharing requests through the Data Marketplace pla...

Data protection regulation in General Rules for Secondary Use of Data

On 25 December 2025, the Saudi Data and AI Authority (SDAIA) adopted the General Rules for Secondary Use of Data. They establish data protection regulations governing the secondary use of data for purposes other than those initially specified at the time of data collection. The general rules require compliance with the Personal Data Protection Law and its Implementing Regulations. They apply to data-sharing requests between government entities, from government entities to private entities for...

National Cryptographic Standards (NCS-2:2025)

On 25 December 2025, the National Cybersecurity Authority (NCA) closed the public consultation the updated National Cryptographic Standards (NCS-2:2025). The National Cryptographic Standards (NCS-2:2025) define minimum cryptographic requirements for components such as cryptographic primitives, cryptographic schemes, commonly used cryptographic protocols, public key infrastructure, and key lifecycle management, differentiating between moderate and advanced levels of encryption. The Standards s...

China and Saudi Arabia pledge deeper hi-tech cooperation

Saudi Press Agency source on AI governance

Official source record dated 12 May 2025 for Saudi Arabia concerning Saudi Crown Prince launches new company to develop AI technologies. See the linked spa.gov.sa source for the authoritative text, procedural context, and implementation details.

United States-Saudi Arabia strategic Artificial Intelligence partnership

On 19 November 2025, the United States Department of State and the Ministry of Foreign Affairs of the Kingdom of Saudi Arabia signed the strategic Artificial Intelligence (AI) partnership. The partnership is a government-to-government framework to support advanced semiconductor supply, AI application development, cloud and AI infrastructure services, and high-value technology investments across sectors, including health, education, energy, mining, and transport. The partnership introduces com...

US approves sale of 70,000 AI chips to UAE and Saudi Arabia

Primary source (commerce.gov) dated 19 November 2025 in SA. See linked source for full text.

US and Saudi Arabia sign strategic AI partnership

On the occasion of the signing by His Highness Prince Faisal bin Farhan bin Abdullah Al Saud, the Minister of Foreign Affairs of the Kingdom of Saudi Arabia, and The Honorable Secretary of State of the United States of America, Mr. Marco Rubio, of the Strategic Artificial Intelligence (AI) Partnership between the two countries, His Highness and Secretary Rubio affirmed that the signing of the Strategic AI Partnership is a historic step that establishes a new milestone in the strategic relationship between the two countries. It reflects the firm commitment of both sides to advance innovation an

National Cybersecurity Authority cybersecurity risk management framework

On 23 July 2025, the National Cybersecurity Authority (NCA) released the National Cybersecurity Risk Management Framework. The framework applies to government bodies, government-affiliated entities, private sector organisations in critical infrastructure, and all other entities designated by the competent authority. It includes methods for identifying, assessing, and mitigating cyber risks while delineating responsibilities and procedures. The framework includes structured phases for risk ide...

Saudi Data and Artificial Intelligence Authority Artificial Intelligence Index

On 22 July 2025, the Saudi Data and Artificial Intelligence Authority (SDAIA) launched the “National AI Index” to assess government readiness for adopting artificial intelligence (AI) technologies. The index is structured around three main pillars, seven core dimensions, and 23 subcategories to enable a comprehensive evaluation of institutional AI adoption maturity. It is designed to monitor progress, provide recommendations, and facilitate the alignment of government efforts with national pr...

Saudi Data and Artificial Intelligence Authority: technical sandbox for the national platform Tawakkalna

On 20 July 2025, the Saudi Data and Artificial Intelligence Authority (SDAIA) launched the technical sandbox for the national platform Tawakkalna and commenced accepting applications from the first group of private sector companies. The sandbox enables companies to test digital services with real users in a secure technical environment, facilitating integration between public and private entities under a flexible and regulated framework. The initiative supports the expansion of Tawakkalna’s f...

Saudi Arabia commits $600 billion investment in US, covering AI

STRENGTHENING STRATEGIC PARTNERSHIPS FOR ECONOMIC PROSPERITY: Today in Saudi Arabia, President Donald J. Trump announced Saudi Arabia’s $600-billion commitment to invest in the United States, building economic ties that will endure for generations to come. The first deals under the announcement strengthen our energy security, defense industry, technology leadership, and access to global infrastructure and critical minerals.

BRICS+ sign declaration on AI governance

Declaração da Presidência da Reunião de Ministros das Relações Exteriores/Relações Internacionais dos Países Membros do BRICS [*]

Saudi Data and Artificial Intelligence Authority inquiry into agentic AI

On 3 August 2025, the Saudi Data and Artificial Intelligence Authority (SDAIA) released a report detailing the dimensions, technological developments, and applications of Agentic Artificial Intelligence (Agentic AI) at global and national levels. The report outlines its core capabilities, perception, reasoning, learning, action-taking, communication, and autonomous operation, and its integration in sectors including healthcare, education, and energy. The report examined the historical evoluti...

SDAIA releases report on agentic AI and national applications

Primary source (sdaia.gov.sa) dated 3 August 2025 in SA. See linked source for full text.

Data and Artificial Intelligence Authority risk assessment guideline for cross-border personal data transfers

In February 2025, the Data and Artificial Intelligence Authority (SDAIA) published its "Risk Assessment Guideline for Transferring Personal Data Outside the Kingdom", providing a framework for entities to assess risks associated with disclosing personal data to foreign entities. The guideline outlines four phases: preparation, assessing negative impacts and potential risks of personal data processing, conducting a risk assessment for data transfer or disclosure, and identifying factors relate...

Saudi Arabia-Uzbekistan Digital Partnership Agreement

On 18 December 2024, the Ministers of Communications and Information Technology of Saudi Arabia and Uzbekistan signed a digital partnership agreement. The agreement aims to enhance bilateral cooperation in the fields of communications and modern technologies. It focuses on economic development through digital transformation, sharing knowledge and expertise in artificial intelligence, digital infrastructure, 5G and 6G technologies, cloud computing, data centers, and technical entrepreneurship....

Generative AI Guidelines published

Primary source (sdaia.gov.sa) dated 11 January 2024 in SA. See linked source for full text.

SDAIA Personal Data Breach Incidents Procedural Guide

On 21 October 2024, the Saudi Data and AI Authority (SDAIA) issued the personal data breach incidents procedural guide, clarifying obligations under the Personal Data Protection Law. The guide outlines that controllers must notify SDAIA within 72 hours of becoming aware of a breach, particularly if it affects the data subjects' rights or interests. The notification must include details such as the time of the breach, the type of personal data involved, and any risks posed to affected individu...

SDAIA Generative Artificial Intelligence Guidelines for Optimal Adoption in Government Entities

On 10 January 2024, the Saudi Data and AI Authority (SDAIA) published the Generative Artificial Intelligence Guidelines for Optimal Adoption in Government Entities. The Guidelines outline the key principles regarding the use of generative AI in connection with government data and in critical decision-making processes. Further, the document outlines the importance of the role of data offices in overseeing both the ethical and legal aspects of the use of AI tools in government.

SDAIA AI Adoption Framework

On 12 September 2024, the Saudi Data & AI Authority (SDAIA) published the AI Adoption Framework. The framework provides a strategic roadmap for the integration of artificial intelligence across a range of sectors in Saudi Arabia, including critical steps and best practices. It outlines a number of steps, such as defining priorities, establishing an AI unit, and assessing readiness. The objective of AI units is to align AI projects with the organisational goals of the company in question, to e...

SDAIA Personal Data Processing Activities Records Guideline

On 3 September 2024, the Saudi Data and Artificial Intelligence Authority (SDAIA) published the Personal Data Processing Activities Records Guideline. In particular, the Guideline provides a framework for organisations to comply with the requirement to document personal data processing activities in compliance with the Personal Data Protection Law and its Implementing Regulations. It explains the legal obligations of data processors, including requirements for keeping records for five years, ...

SDAIA Personal Data Destruction, Anonymisation, and Pseudonymisation Guideline

On 3 September 2024, the Saudi Data and Artificial Intelligence Authority (SDAIA) published the Personal Data Destruction, Anonymisation, and Pseudonymisation Guideline. In particular, the Guideline provides a framework intended to help entities comply with the data destruction, anonymisation, and pseudonymisation requirements in the Saudi Personal Data Protection Law and its Implementing Regulations. The Guideline outlines procedures and best practices for data destruction, ensuring data is ...

SDAIA guide on preparation of binding common rules for transfer of personal data

On 2 September 2024, the Guidelines for Binding Common Rules (BCR) for Personal Data Transfer issued by the Saudi Arabia Authority for Data and Artificial Intelligence (SDAIA) entered into force. The Guidelines clarify the obligations of entities transferring personal data outside Saudi Arabia to entities in countries or international organisations not recognised for providing an adequate level of personal data protection. The initiative is grounded in the Personal Data Protection Law, as ame...

Amendments to the regulations on transferring personal data outside the Kingdom

On 1 September 2024, the amendments to the Regulation on Personal Data Transfer outside the Kingdom issued by the Saudi Arabia Authority for Data and Artificial Intelligence (SDAIA) entered into force after its publication in the official Gazette. The Regulation includes updates to definitions, general provisions for transferring personal data, procedures for assessing the level of protection in countries or international organisations, requirements for conducting risk assessments before tran...

SDAIA Minimum Personal Data Determination Guideline

On 30 August 2024, the Minimum Personal Data Determination Guideline issued by the Saudi Arabia Authority for Data and Artificial Intelligence (SDAIA) entered into force. The Guideline establishes that the minimum collection of personal data refers to the practice of collecting only the personal data that is strictly necessary and directly relevant to the purpose for which it is being collected. To this end, the Guideline requires controllers to conduct regular assessments to evaluate the per...

Elaboration and Developing of the Privacy Policy Guideline

On 28 August 2024, the Saudi Data & AI Authority (SDAIA) adopted the Guideline on the Elaboration and Developing of the Privacy Policy for entities subject to the Personal Data Protection Law. The purpose of the Guideline is to support entities in formulating their privacy policies. Specifically, it lists the key elements of a privacy policy, including name, content of collected personal data, and data collection methods. The Guideline also provides a comprehensive template which can be used...

SDAIA rules for appointing personal data protection officer

On 27 August 2024, the Saudi Data and Artificial Intelligence Authority (SDAIA) adopted and published the Rules for Appointing Personal Data Protection Officers (DPO). The Rules apply to all controllers covered by provisions of the Law and its Implementing Regulations and aim to set minimum requirements for appointing DPOs, including adequate qualifications in data protection, knowledge of risk knowledge and regulatory requirements, and ethical integrity. The Rules requires appointment of DPO...

Saudi Press Agency source on international AI summit activity

Official source record dated 22 August 2024 for Saudi Arabia concerning Saudi Arabia to host third Global AI Summit. See the linked spa.gov.sa source for the authoritative text, procedural context, and implementation details.

Guideline for Personal Data Disclosure Cases

On 1 August 2024, the Saudi Data & AI Authority (SDAIA) adopted guidelines aimed at assisting entities in understanding their obligations under the Personal Data Protection Law and its Implementing Regulations. These guidelines outline the permissible cases and restrictions for personal data disclosure, emphasising the need for consent, public interest, and the protection of individual privacy. The document serves as a non-binding reference to aid entities in compliance, encouraging best prac...

AI Center for Media (AICOM)

On 16 May 2024, the Saudi Minister of Media and the President of the Saudi Data and Artificial Intelligence Authority (SDAIA) announced the AI Center for Media (AICOM) at the Saudi Media Forum. AICOM's function is to monitor the impact of data and AI on media and support the media sector in its use of these technologies. The Minister and the President also announced the and the Generative AI in Media Bootcamp.