The Data Transfer Regulations, initially issued on 7 September 2023 and replaced by a new version on 1 September 2024, govern the transfer of personal data outside Saudi Arabia’s borders. These regulations establish requirements for cross-border data transfers including adequacy assessments, appropriate safeguards, and specific contractual requirements. Organizations must ensure transferred data receives protection comparable to that under the PDPL and maintain documentation of all international transfers.
Health Data Management Policy (under Ayushman Bharat Digital Mission)
ABDM participants must comply with the Health Data Management Policy. Healthcare laws include the Clinical Establishments Act, National Medical Commission Act provisions requiring physician confidentiality,