Businesses launching loyalty schemes in the KSA face a complex web of regulatory requirements spanning data protection, consumer protection, financial regulation, competition law, and intellectual property.

By Brian A. Meenagh, Danielle van der Merwe, Khaled Alhuneidi, Ksenia Koroleva, and Faisal Imam*

Loyalty programs have become a cornerstone of customer engagement strategies across the Kingdom of Saudi Arabia (KSA). From airline frequent-flyer schemes to retail and entertainment rewards platforms, businesses are increasingly leveraging points-based incentives, loyalty

The Resolution reaches any social media platform whose services are made available in, or directed at users in, the UAE.

By Brian A. Meenagh, Danielle van der Merwe, Ksenia Koroleva, and Fady Saleh

The United Arab Emirates (UAE) has issued Cabinet Resolution No. 106 of 2026 Regarding the Regulation of Children’s Access to Social Media Platforms (the Resolution), which prohibits children under 15 from creating, using, or operating personal accounts on social media platforms. The Resolution implements

Organizations should prioritize compliance efforts in light of mounting regulatory scrutiny and potential fines.

By Brian A. MeenaghDanielle van der Merwe, and Faisal Imam*

The Kingdom of Saudi Arabia’s Personal Data Protection Law (PDPL) is now firmly in its active enforcement phase. The one-year grace period granted to organizations to achieve compliance ended on September 14, 2024, and the Saudi Data and Artificial Intelligence Authority (SDAIA) has moved from awareness-building and guidance to regulatory action. Businesses operating

The law has extraterritorial reach over digital platforms and internet service providers that operate in, or target users in, the UAE.

By Brian A. Meenagh, Danielle van der Merwe, Ksenia Koroleva, and Fady Saleh

The United Arab Emirates (UAE) has enacted Federal Decree‑Law No. 26 of 2025 on Child Digital Safety (the CDS Federal Law), establishing a comprehensive framework to protect children online with extraterritorial reach over digital platforms and internet service providers that operate in, or

The draft law proposes a data embassy ecosystem and comprehensive framework in Saudi Arabia, promoting its position as a global AI hub.

By Brian Meenagh, Ksenia Koroleva, and Faisal Imam*

On April 14, 2025, Saudi Arabia’s Communications, Space and Technology Commission (CST) issued a consultation draft of a “Global AI Hub Law.” This draft law marks Saudi Arabia as the first G20 nation to publish a draft of a comprehensive legal framework that embraces the

The healthcare and life sciences ecosystem is witnessing significant growth in the Middle East as the GCC continues to seek economic diversification.

By Brian A. Meenagh, Sara Patel, and Lucy Tucker

The United Arab Emirates (UAE) and Kingdom of Saudi Arabia (KSA) are advancing initiatives to nurture a thriving life sciences ecosystem in the Middle East and North Africa (MENA). In January 2024, Saudi Arabia launched its National Biotechnology Strategy, which aims to position itself as a biotech

The PDPL has broad extraterritorial scope and substantial penalties for non-compliance, with full enforcement expected to start in September.

By Brian A. Meenagh and Lucy Tucker

The Personal Data Protection Law (PDPL) is the first comprehensive data protection law in Saudi Arabia. The Saudi Data and Artificial Intelligence Authority (SDAIA) is expected to start full enforcement of the PDPL from 14 September 2024, after the current compliance transition period ends. SDAIA emphasised that it expects entities to take measures to achieve compliance with the PDPL by the September deadline.  

Recognizing new realities in decentralization, the regulations aim to provide market players with governance flexibility within distributed ledger technology foundations.

By Stuart Davis, Brian Meenagh, Andrew Moyle, and Ksenia Koroleva

On October 2, 2023, the Board of Directors of Abu Dhabi Global Market (ADGM), a financial free zone in the United Arab Emirates (UAE), enacted the Distributed Ledger Technology Foundations Regulations 2023 (Regulations). The Regulations were published on November 1, 2023.

Latham & Watkins has advised ADGM in drafting the Regulations. The Regulations were developed following extensive benchmarking across a number of peer jurisdictions and incorporate stakeholder feedback from ADGM’s April 2023 consultation paper. The adoption of the Regulations is part of the strategy to promote ADGM as a global center for digital assets.

The Regulations recognize the suitability of common law foundation structures for projects related to digital assets, and aim to allow maximum flexibility for the sector with respect to governance.