IT’S THE LAW (12/06/2022)

Saudi Arabia’s data authority has published draft amendments to its Personal Data Protection Law (PDPL) for comments this month in preparation for changes to go into effect this spring. This includes major changes to make laws more business friendly. The Saudi Data and AI Authority (SDAIA) changes include allowing data transfers to jurisdictions that ensure appropriate privacy protection; allowing legitimate interest as a basis for processing non-sensitive data, including for location data; and a right to individual data portability.