{"id":88770,"date":"2024-08-18T00:00:00","date_gmt":"2024-08-18T00:00:00","guid":{"rendered":"https:\/\/enterpriseam.com\/ksa\/2024\/08\/18\/fresh-regs-on-personal-data-transfers-outside-the-kingdom\/"},"modified":"2024-08-18T00:00:00","modified_gmt":"2024-08-18T00:00:00","slug":"fresh-regs-on-personal-data-transfers-outside-the-kingdom","status":"publish","type":"post","link":"https:\/\/enterpriseam.com\/ksa\/2024\/08\/18\/fresh-regs-on-personal-data-transfers-outside-the-kingdom\/","title":{"rendered":"Fresh regs on personal data transfers outside the Kingdom"},"content":{"rendered":"

Contractual clauses for personal data transfers:<\/strong> The Saudi Data and AI Authority (SDAIA) is seeking public consultation on a proposed set of contractual clauses that, if approved, would become binding in all contracts relating to the access and sharing of Saudi nationals\u2019 personal data with countries or organizations that don\u2019t meet adequate data protection standards. Stakeholders have until Friday, 30 August, to share feedback on the government surveying platform Istitlaa<\/a>. Here\u2019s the full proposal standard contractual clauses for personal data transfer (pdf)<\/a>. <\/p>\n

BACKGROUND-<\/strong> SDAIA launched public consultations in March<\/a> on a draft policy to regulate access to and the sharing of Saudi data outside of the Kingdom. The new regulations were introduced against the backdrop of the increasing downside risks that arise with tech advancements. The rules regulate how public and personal data must be handled during its collection, storing, processing, dissemination, and use, with an emphasis on the who, what, when, where, why and how of sharing data with parties outside the Kingdom.<\/p>\n

The rationale: <\/strong>The proposed contractual clauses ensure that personal data transferred outside of the Kingdome gets the same level of protection as required by the law. They specify the obligations of the parties involved, primarily data controllers, and processors. A data controller is the entity that owns the data, and the processor is the entity on the receiving end.<\/p>\n

Notification requirement:<\/strong> If the data importer is unable to meet its obligations under these clauses for any reason, it must notify the data exporter within 24 hours of becoming aware of the issue.<\/p>\n

Data protection obligations: <\/strong>The contracting parties must ensure that the specified organizational, administrative, and technical measures provide adequate protection for transferred personal data in line with applicable legal requirements. The data importer is responsible for applying these security measures to all personal data to prevent breaches, unauthorized access, or other risks. Additionally, the data importer must periodically review and update these measures to ensure ongoing compliance with the relevant regulations.<\/p>\n

Have inquiries about the use of your personal data?<\/strong> Data importers and exporters are obliged, under the proposed clauses, to handle and respond to any queries or requests from the owner of the data about how their data is being processed and what their rights are in that regard, within 30 days of receiving the request. If the request is complex, the duration may be extended by another 30 days, while notifying the data owner in advance with an explanation for the delay. <\/p>\n

Enforcement + jurisdiction: <\/strong>The proposed guidelines indicate that disputes related to such contracts are to be handled by Saudi Arabian courts. <\/p>\n","protected":false},"excerpt":{"rendered":"

Public consultation is open until Friday, 30 August.<\/p>\n","protected":false},"author":1,"featured_media":88771,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"newspack_ads_suppress_ads":false,"newspack_popups_has_disabled_popups":false,"newspack_sponsor_sponsorship_scope":"","newspack_sponsor_native_byline_display":"inherit","newspack_sponsor_native_category_display":"inherit","newspack_sponsor_underwriter_style":"inherit","newspack_sponsor_underwriter_placement":"inherit","ep_exclude_from_search":false,"_primary_brand":0,"newspack_featured_image_position":"","newspack_post_subtitle":"","newspack_article_summary_title":"Overview:","newspack_article_summary":"","newspack_hide_updated_date":false,"newspack_show_updated_date":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[2644],"tags":[10,243,3042,344,2457],"brand":[],"newspack_spnsrs_tax":[],"class_list":["post-88770","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-regulation-watch","tag-enterpriseam-ksa","tag-legislation-watch","tag-personal-data-protection","tag-regulation-watch","tag-saudi-data-and-artificial-intelligence-authority-sdaia","wpautop","entry"],"acf":{"mongo_id":"6755fd96-1360-45dd-a729-b21044a76d67","order":"7","is_powered_by":false,"story_type":"1","photo_url":"https:\/\/ent.news\/2024\/8\/1490.jpg","photo_position":"above","homepage_title":"","full_issue_title":"Fresh regs on personal data transfers outside the Kingdom","related_issue":[88757],"teaser":"Public consultation is open until Friday, 30 August.","voice_url":"https:\/\/s3.us-east-1.amazonaws.com\/ent.news\/audio\/2024\/8\/.169a671b-ca6b-4775-b217-24b75462365c.mp3"},"yoast_head":"\nFresh regs on personal data transfers outside the Kingdom - KSA<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/enterpriseam.com\/ksa\/2024\/08\/18\/fresh-regs-on-personal-data-transfers-outside-the-kingdom\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Fresh regs on personal data transfers outside the Kingdom\" \/>\n<meta property=\"og:description\" content=\"Public consultation is open until Friday, 30 August.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/enterpriseam.com\/ksa\/2024\/08\/18\/fresh-regs-on-personal-data-transfers-outside-the-kingdom\/\" \/>\n<meta property=\"og:site_name\" content=\"KSA\" \/>\n<meta property=\"article:published_time\" content=\"2024-08-18T00:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i0.wp.com\/ent.news\/2024\/8\/1490.jpg?fit=%2C&ssl=1\" \/>\n<meta name=\"author\" content=\"enterpriseam admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"enterpriseam admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/enterpriseam.com\/ksa\/2024\/08\/18\/fresh-regs-on-personal-data-transfers-outside-the-kingdom\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/enterpriseam.com\/ksa\/2024\/08\/18\/fresh-regs-on-personal-data-transfers-outside-the-kingdom\/\"},\"author\":{\"name\":\"enterpriseam admin\",\"@id\":\"https:\/\/enterpriseam.com\/ksa\/#\/schema\/person\/ca597032db7e4db868359c123cec256d\"},\"headline\":\"Fresh regs on personal data transfers outside the Kingdom\",\"datePublished\":\"2024-08-18T00:00:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/enterpriseam.com\/ksa\/2024\/08\/18\/fresh-regs-on-personal-data-transfers-outside-the-kingdom\/\"},\"wordCount\":436,\"publisher\":{\"@id\":\"https:\/\/enterpriseam.com\/ksa\/#organization\"},\"image\":{\"@id\":\"https:\/\/enterpriseam.com\/ksa\/2024\/08\/18\/fresh-regs-on-personal-data-transfers-outside-the-kingdom\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/i0.wp.com\/ent.news\/2024\/8\/1490.jpg?fit=%2C&ssl=1\",\"keywords\":[\"EnterpriseAM KSA\",\"LEGISLATION WATCH\",\"Personal data protection\",\"REGULATION WATCH\",\"Saudi Data and Artificial Intelligence Authority (SDAIA)\"],\"articleSection\":[\"REGULATION WATCH\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/enterpriseam.com\/ksa\/2024\/08\/18\/fresh-regs-on-personal-data-transfers-outside-the-kingdom\/\",\"url\":\"https:\/\/enterpriseam.com\/ksa\/2024\/08\/18\/fresh-regs-on-personal-data-transfers-outside-the-kingdom\/\",\"name\":\"Fresh regs on personal data transfers outside the Kingdom - KSA\",\"isPartOf\":{\"@id\":\"https:\/\/enterpriseam.com\/ksa\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/enterpriseam.com\/ksa\/2024\/08\/18\/fresh-regs-on-personal-data-transfers-outside-the-kingdom\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/enterpriseam.com\/ksa\/2024\/08\/18\/fresh-regs-on-personal-data-transfers-outside-the-kingdom\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/i0.wp.com\/ent.news\/2024\/8\/1490.jpg?fit=%2C&ssl=1\",\"datePublished\":\"2024-08-18T00:00:00+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/enterpriseam.com\/ksa\/2024\/08\/18\/fresh-regs-on-personal-data-transfers-outside-the-kingdom\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/enterpriseam.com\/ksa\/2024\/08\/18\/fresh-regs-on-personal-data-transfers-outside-the-kingdom\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/enterpriseam.com\/ksa\/2024\/08\/18\/fresh-regs-on-personal-data-transfers-outside-the-kingdom\/#primaryimage\",\"url\":\"https:\/\/i0.wp.com\/ent.news\/2024\/8\/1490.jpg?fit=%2C&ssl=1\",\"contentUrl\":\"https:\/\/i0.wp.com\/ent.news\/2024\/8\/1490.jpg?fit=%2C&ssl=1\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/enterpriseam.com\/ksa\/2024\/08\/18\/fresh-regs-on-personal-data-transfers-outside-the-kingdom\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/enterpriseam.com\/ksa\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Fresh regs on personal data transfers outside the Kingdom\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/enterpriseam.com\/ksa\/#website\",\"url\":\"https:\/\/enterpriseam.com\/ksa\/\",\"name\":\"KSA\",\"description\":\"The State of the Nation\",\"publisher\":{\"@id\":\"https:\/\/enterpriseam.com\/ksa\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/enterpriseam.com\/ksa\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/enterpriseam.com\/ksa\/#organization\",\"name\":\"KSA\",\"url\":\"https:\/\/enterpriseam.com\/ksa\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/enterpriseam.com\/ksa\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/ent.news\/internal\/42482.svg\",\"contentUrl\":\"https:\/\/ent.news\/internal\/42482.svg\",\"caption\":\"KSA\"},\"image\":{\"@id\":\"https:\/\/enterpriseam.com\/ksa\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/enterpriseam.com\/ksa\/#\/schema\/person\/ca597032db7e4db868359c123cec256d\",\"name\":\"enterpriseam admin\",\"sameAs\":[\"http:\/\/enterpriseam.testing.projectsarea.com\"],\"url\":\"https:\/\/enterpriseam.com\/ksa\/author\/enterpriseam\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Fresh regs on personal data transfers outside the Kingdom - KSA","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/enterpriseam.com\/ksa\/2024\/08\/18\/fresh-regs-on-personal-data-transfers-outside-the-kingdom\/","og_locale":"en_US","og_type":"article","og_title":"Fresh regs on personal data transfers outside the Kingdom","og_description":"Public consultation is open until Friday, 30 August.","og_url":"https:\/\/enterpriseam.com\/ksa\/2024\/08\/18\/fresh-regs-on-personal-data-transfers-outside-the-kingdom\/","og_site_name":"KSA","article_published_time":"2024-08-18T00:00:00+00:00","og_image":[{"url":"https:\/\/i0.wp.com\/ent.news\/2024\/8\/1490.jpg?fit=%2C&ssl=1","type":"","width":"","height":""}],"author":"enterpriseam admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"enterpriseam admin","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/enterpriseam.com\/ksa\/2024\/08\/18\/fresh-regs-on-personal-data-transfers-outside-the-kingdom\/#article","isPartOf":{"@id":"https:\/\/enterpriseam.com\/ksa\/2024\/08\/18\/fresh-regs-on-personal-data-transfers-outside-the-kingdom\/"},"author":{"name":"enterpriseam admin","@id":"https:\/\/enterpriseam.com\/ksa\/#\/schema\/person\/ca597032db7e4db868359c123cec256d"},"headline":"Fresh regs on personal data transfers outside the Kingdom","datePublished":"2024-08-18T00:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/enterpriseam.com\/ksa\/2024\/08\/18\/fresh-regs-on-personal-data-transfers-outside-the-kingdom\/"},"wordCount":436,"publisher":{"@id":"https:\/\/enterpriseam.com\/ksa\/#organization"},"image":{"@id":"https:\/\/enterpriseam.com\/ksa\/2024\/08\/18\/fresh-regs-on-personal-data-transfers-outside-the-kingdom\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/ent.news\/2024\/8\/1490.jpg?fit=%2C&ssl=1","keywords":["EnterpriseAM KSA","LEGISLATION WATCH","Personal data protection","REGULATION WATCH","Saudi Data and Artificial Intelligence Authority (SDAIA)"],"articleSection":["REGULATION WATCH"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/enterpriseam.com\/ksa\/2024\/08\/18\/fresh-regs-on-personal-data-transfers-outside-the-kingdom\/","url":"https:\/\/enterpriseam.com\/ksa\/2024\/08\/18\/fresh-regs-on-personal-data-transfers-outside-the-kingdom\/","name":"Fresh regs on personal data transfers outside the Kingdom - KSA","isPartOf":{"@id":"https:\/\/enterpriseam.com\/ksa\/#website"},"primaryImageOfPage":{"@id":"https:\/\/enterpriseam.com\/ksa\/2024\/08\/18\/fresh-regs-on-personal-data-transfers-outside-the-kingdom\/#primaryimage"},"image":{"@id":"https:\/\/enterpriseam.com\/ksa\/2024\/08\/18\/fresh-regs-on-personal-data-transfers-outside-the-kingdom\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/ent.news\/2024\/8\/1490.jpg?fit=%2C&ssl=1","datePublished":"2024-08-18T00:00:00+00:00","breadcrumb":{"@id":"https:\/\/enterpriseam.com\/ksa\/2024\/08\/18\/fresh-regs-on-personal-data-transfers-outside-the-kingdom\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/enterpriseam.com\/ksa\/2024\/08\/18\/fresh-regs-on-personal-data-transfers-outside-the-kingdom\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/enterpriseam.com\/ksa\/2024\/08\/18\/fresh-regs-on-personal-data-transfers-outside-the-kingdom\/#primaryimage","url":"https:\/\/i0.wp.com\/ent.news\/2024\/8\/1490.jpg?fit=%2C&ssl=1","contentUrl":"https:\/\/i0.wp.com\/ent.news\/2024\/8\/1490.jpg?fit=%2C&ssl=1"},{"@type":"BreadcrumbList","@id":"https:\/\/enterpriseam.com\/ksa\/2024\/08\/18\/fresh-regs-on-personal-data-transfers-outside-the-kingdom\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/enterpriseam.com\/ksa\/"},{"@type":"ListItem","position":2,"name":"Fresh regs on personal data transfers outside the Kingdom"}]},{"@type":"WebSite","@id":"https:\/\/enterpriseam.com\/ksa\/#website","url":"https:\/\/enterpriseam.com\/ksa\/","name":"KSA","description":"The State of the Nation","publisher":{"@id":"https:\/\/enterpriseam.com\/ksa\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/enterpriseam.com\/ksa\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/enterpriseam.com\/ksa\/#organization","name":"KSA","url":"https:\/\/enterpriseam.com\/ksa\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/enterpriseam.com\/ksa\/#\/schema\/logo\/image\/","url":"https:\/\/ent.news\/internal\/42482.svg","contentUrl":"https:\/\/ent.news\/internal\/42482.svg","caption":"KSA"},"image":{"@id":"https:\/\/enterpriseam.com\/ksa\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/enterpriseam.com\/ksa\/#\/schema\/person\/ca597032db7e4db868359c123cec256d","name":"enterpriseam admin","sameAs":["http:\/\/enterpriseam.testing.projectsarea.com"],"url":"https:\/\/enterpriseam.com\/ksa\/author\/enterpriseam\/"}]}},"featured_image_src":"https:\/\/i0.wp.com\/ent.news\/2024\/8\/1490.jpg?resize=600%2C400&ssl=1","featured_image_src_square":"https:\/\/i0.wp.com\/ent.news\/2024\/8\/1490.jpg?resize=600%2C600&ssl=1","author_info":{"display_name":"enterpriseam admin","author_link":"https:\/\/enterpriseam.com\/ksa\/author\/enterpriseam\/"},"jetpack_featured_media_url":"https:\/\/i0.wp.com\/ent.news\/2024\/8\/1490.jpg?fit=%2C&ssl=1","jetpack_sharing_enabled":true,"jetpack-related-posts":[],"_links":{"self":[{"href":"https:\/\/enterpriseam.com\/ksa\/wp-json\/wp\/v2\/posts\/88770","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/enterpriseam.com\/ksa\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/enterpriseam.com\/ksa\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/enterpriseam.com\/ksa\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/enterpriseam.com\/ksa\/wp-json\/wp\/v2\/comments?post=88770"}],"version-history":[{"count":0,"href":"https:\/\/enterpriseam.com\/ksa\/wp-json\/wp\/v2\/posts\/88770\/revisions"}],"acf:post":[{"embeddable":true,"href":"https:\/\/enterpriseam.com\/ksa\/wp-json\/wp\/v2\/issue\/88757"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/enterpriseam.com\/ksa\/wp-json\/wp\/v2\/media\/88771"}],"wp:attachment":[{"href":"https:\/\/enterpriseam.com\/ksa\/wp-json\/wp\/v2\/media?parent=88770"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/enterpriseam.com\/ksa\/wp-json\/wp\/v2\/categories?post=88770"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/enterpriseam.com\/ksa\/wp-json\/wp\/v2\/tags?post=88770"},{"taxonomy":"brand","embeddable":true,"href":"https:\/\/enterpriseam.com\/ksa\/wp-json\/wp\/v2\/brand?post=88770"},{"taxonomy":"newspack_spnsrs_tax","embeddable":true,"href":"https:\/\/enterpriseam.com\/ksa\/wp-json\/wp\/v2\/newspack_spnsrs_tax?post=88770"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}