Global Compliance Library

Middle East

UAE and Saudi Arabia data-protection and cybersecurity.

United Arab Emirates

UAE PDPL

Conditional

UAE Personal Data Protection Law

Legislation / Act

Authority:: UAE (Federal Decree-Law No. 45 of 2021); UAE Data Office
Status:: In force; federal Executive Regulations still pending
Applies to:: Processing of personal data of UAE data subjects (with exemptions; sector and free-zone regimes such as DIFC/ADGM may also apply).

View details →

Saudi Arabia

Saudi PDPL

Conditional

Saudi Personal Data Protection Law

Legislation / Act

Authority:: Kingdom of Saudi Arabia (Royal Decree M/19, amended M/148); SDAIA
Status:: In force and enforceable
Applies to:: Processing of personal data of individuals in Saudi Arabia, including by entities outside the Kingdom in certain cases.

View details →

NCA ECC

Mandatory

NCA Essential Cybersecurity Controls

Regulatory direction

Authority:: Saudi National Cybersecurity Authority (NCA)
Status:: In force (ECC and related NCA frameworks)
Applies to:: Government organisations and operators of critical national infrastructure, with wider adoption across regulated entities.

Official source ↗

This library provides general information for orientation only. It is not legal advice, a determination of applicability, or a substitute for formal certification or professional counsel. Verify current legal status, editions and dates against the official source before relying on any entry. Inclusion of a jurisdiction or instrument here is informational and does not imply that Srida IT provides regulated services, holds local authorisation, or has a presence in that jurisdiction.

Need to assess your readiness against Middle East requirements?

Request an Assessment