Organizations should prioritize compliance efforts in light of mounting regulatory scrutiny and potential fines.

By Brian A. MeenaghDanielle van der Merwe, and Faisal Imam*

The Kingdom of Saudi Arabia’s Personal Data Protection Law (PDPL) is now firmly in its active enforcement phase. The one-year grace period granted to organizations to achieve compliance ended on September 14, 2024, and the Saudi Data and Artificial Intelligence Authority (SDAIA) has moved from awareness-building and guidance to regulatory action. Businesses operating

Data protection in the Middle EastDigital Identity Dominates

 Having a digital identity for online browsing, transactions and interactions has become necessary to operate in this information age.  As more and more lifestyle and business services shift to the digital platform, there has been an explosive growth in personal data capture.  The “Big Data” phenomenon has the potential to transform, innovate and optimize entire industries, yet policy makers need to be able to strike the balance between productivity and privacy to protect personal data.

Protecting Personal