Personal Data Protection Law (PDPL), published on 24 September 2021 is due to come into effect on 23 March 2022. This law defines a set of policies to process personal data and sets out rights of the personal data owners as well. It will require businesses to make significant changes in how they collect, process, and store personal information of clients. This law is applicable to personal information of all the residents of Kingdom of Saudi Arab, whether this information is being processed by entities that reside inside the KSA or by any outside entity. The processing of personal data includes collecting, modifying, disclosing, storing, transferring, destroying, or blocking personal individual data.
