soccer field

The Law introduces registration, licensing, governance, investment, and dispute resolution requirements for the Kingdom’s sports sector.

By Salman Al-Sudairi, Abdullah A. Alsaeed, and Talal Fuad Abul

On June 11, 2026, the Kingdom of Saudi Arabia’s new Sports Law (the Law) became effective, replacing the Basic Regulation for Sports Federations and the Saudi Arabian Olympic Committee issued by Royal Decree No. M/55 dated 19/10/1407H.

The Law defines the institutional roles of the Ministry of Sport, the Minister of Sport…

2to1 - dreamstime-273315747

Businesses launching loyalty schemes in the KSA face a complex web of regulatory requirements spanning data protection, consumer protection, financial regulation, competition law, and intellectual property.

By Brian A. Meenagh, Danielle van der Merwe, Khaled Alhuneidi, Ksenia Koroleva, and Faisal Imam*

Loyalty programs have become a cornerstone of customer engagement strategies across the Kingdom of Saudi Arabia (KSA). From airline frequent-flyer schemes to retail and entertainment rewards platforms, businesses are increasingly leveraging points-based incentives, loyalty…

Stairs to the Emirates Palace hotel

The Resolution reaches any social media platform whose services are made available in, or directed at users in, the UAE.

By Brian A. Meenagh, Danielle van der Merwe, Ksenia Koroleva, and Fady Saleh

The United Arab Emirates (UAE) has issued Cabinet Resolution No. 106 of 2026 Regarding the Regulation of Children’s Access to Social Media Platforms (the Resolution), which prohibits children under 15 from creating, using, or operating personal accounts on social media platforms. The Resolution implements…

Flowing particle lines

Organizations should prioritize compliance efforts in light of mounting regulatory scrutiny and potential fines.

By Brian A. Meenagh, Danielle van der Merwe, and Faisal Imam*

The Kingdom of Saudi Arabia’s Personal Data Protection Law (PDPL) is now firmly in its active enforcement phase. The one-year grace period granted to organizations to achieve compliance ended on September 14, 2024, and the Saudi Data and Artificial Intelligence Authority (SDAIA) has moved from awareness-building and guidance to regulatory action. Businesses operating…

Skyscrapers and highways of downtown Dubai, United Arab Emirates, at sunset

The law has extraterritorial reach over digital platforms and internet service providers that operate in, or target users in, the UAE.

By Brian A. Meenagh, Danielle van der Merwe, Ksenia Koroleva, and Fady Saleh

The United Arab Emirates (UAE) has enacted Federal Decree‑Law No. 26 of 2025 on Child Digital Safety (the CDS Federal Law), establishing a comprehensive framework to protect children online with extraterritorial reach over digital platforms and internet service providers that operate in, or…

Flowing particle lines

The draft law proposes a data embassy ecosystem and comprehensive framework in Saudi Arabia, promoting its position as a global AI hub.

By Brian Meenagh, Ksenia Koroleva, and Faisal Imam*

On April 14, 2025, Saudi Arabia’s Communications, Space and Technology Commission (CST) issued a consultation draft of a “Global AI Hub Law.” This draft law marks Saudi Arabia as the first G20 nation to publish a draft of a comprehensive legal framework that embraces the…

Doctor in white coat

The healthcare and life sciences ecosystem is witnessing significant growth in the Middle East as the GCC continues to seek economic diversification.

By Brian A. Meenagh, Sara Patel, and Lucy Tucker

The United Arab Emirates (UAE) and Kingdom of Saudi Arabia (KSA) are advancing initiatives to nurture a thriving life sciences ecosystem in the Middle East and North Africa (MENA). In January 2024, Saudi Arabia launched its National Biotechnology Strategy, which aims to position itself as a biotech…

RESTRICTED IMAGE - DO NOT USE

The PDPL has broad extraterritorial scope and substantial penalties for non-compliance, with full enforcement expected to start in September.

By Brian A. Meenagh and Lucy Tucker

The Personal Data Protection Law (PDPL) is the first comprehensive data protection law in Saudi Arabia. The Saudi Data and Artificial Intelligence Authority (SDAIA) is expected to start full enforcement of the PDPL from 14 September 2024, after the current compliance transition period ends. SDAIA emphasised that it expects entities to take measures to achieve compliance with the PDPL by the September deadline.