Saudi Arabia

Is there a specific enacted legislation regulating AI in your jurisdiction?

Saudi Arabia does not have a specific enacted legislation exclusively regulating AI. However, the country has been actively developing strategies and frameworks to guide the ethical and effective use of AI technologies. 

The most notable initiative is the Saudi National Strategy for Data and Artificial Intelligence (NSDAI), which aims to position Saudi Arabia as a leader in AI by 2030. This strategy outlines goals for AI integration across various sectors, emphasising ethical considerations, capacity building, and international collaboration.

While specific AI legislation is not yet in place, existing laws related to data protection, cybersecurity, and technology can apply to AI applications. 

Is there a proposed legislation regulating AI in your jurisdiction?

There is not currently any proposed legislation regulating AI in Saudi Arabia. While specific legislative proposals for AI regulation have not been formally announced, the initiatives under the National Strategy for Data and Artificial Intelligence (NSDAI) suggest a move towards establishing a governance framework that could eventually include legislative measures. This strategy emphasises ethical AI use, capacity building, and sector-specific AI integration, reflecting the country's commitment to aligning with international best practices and addressing the ethical, legal, and societal implications of AI technologies.

Are there any guidelines/ codes of conduct/ recommendations / reports / policies in connection with AI in your jurisdiction?

The Saudi Data and Artificial Intelligence Authority (SDAIA) has published several key documents and initiatives to guide the development and implementation of AI, including:

• National Strategy for Data and Artificial Intelligence: This comprehensive strategy outlines Saudi Arabia's vision to become a global leader in AI by 2030. It focuses on leveraging AI to drive economic growth, improve government efficiency, and enhance quality of life while emphasising ethical considerations and international collaboration.
  

• AI Ethics Principles: SDAIA has developed a set of ethical principles to guide the responsible use of AI technologies. These principles aim to ensure that AI systems are developed and deployed in ways that are fair, transparent, and respect privacy and human rights.
  

• Data Governance Policies: While not exclusively about AI, SDAIA's data governance policies are crucial for AI development, as they establish frameworks for data management, sharing, and protection, which are foundational for AI applications.
  

• AI National Policy: This policy aims to promote the adoption of AI across various sectors, encouraging innovation and ensuring that AI applications align with national priorities and ethical standards.
  

• AI Regulatory Framework: Although still in development, this framework is intended to provide guidelines for the safe and effective use of AI technologies, addressing potential risks and ensuring compliance with ethical norms. 

Any additional relevant news regarding AI / or anticipated future changes (e.g. white papers, policy statements about AI regulation)?

Saudi Arabia’s Communications, Space, and Technology Commission has announced a public consultation period for the draft Global AI Hub Law, signalling the country’s sustained push to establish itself as a global nexus for artificial intelligence and data-driven innovation. The proposed framework seeks to promote cutting-edge digital infrastructure, encourage foreign investment in advanced technologies (including sovereign data centres and AI services), and bolster the Kingdom’s overall tech ecosystem. The draft version of the law is open for public feedback until Wednesday, 14 May. Although further details have yet to be released on specific compliance obligations or licensing requirements, industry observers expect that this draft law will underscore transparency, accountability, and the incentivisation of international collaboration, ultimately reflecting the strategic objectives of Saudi Arabia’s broader digital transformation agenda.

In addition, there have been several developments and anticipated future changes in the AI landscape that are worth noting:

• Global AI Summit: Saudi Arabia has hosted the Global AI Summit, which brings together international experts, policymakers, and industry leaders to discuss AI's future. These events often result in policy statements and collaborative initiatives that can influence AI regulation and strategy.
  

• Focus on AI Ethics and Governance: There is a strong emphasis on developing ethical guidelines and governance frameworks for AI. This focus suggests that future regulations may include provisions to ensure AI technologies are used responsibly and align with societal values.

• Investment in AI Research and Development: The Saudi government has been investing heavily in AI research and development, which includes establishing AI research centers and funding AI-driven projects. These investments indicate a long-term commitment to AI advancement, which may eventually lead to more formal regulatory structures.

Is AI specifically addressed in IP laws? Are there any guidelines / soft laws relating to AI? 

Saudi Arabia does not have specific IP laws that address AI directly. The existing IP framework in Saudi Arabia, which includes laws on patents, copyrights, trademarks, and trade secrets, applies to AI-related innovations in the same way it applies to other technologies. This means that AI inventions can be patented, and AI-generated works can be protected under copyright, provided they meet the standard legal requirements for protection.

However, the unique challenges posed by AI, such as issues of authorship and inventorship when AI systems contribute to or independently create works, are not specifically addressed in current Saudi IP laws. These challenges are part of broader international discussions on how IP laws might evolve to accommodate AI technologies.

In terms of guidelines or soft laws, while there may not be specific documents addressing AI in IP, SDAIA and other relevant bodies are actively developing frameworks and strategies to guide the ethical and effective use of AI. These initiatives often touch on broader issues related to innovation, data use, and ethical considerations, which can indirectly influence how AI is treated under IP laws.

For the most current and detailed information, it is advisable to consult recent publications from Saudi IP authorities and SDAIA, as well as to monitor international developments that might influence Saudi Arabia's approach to AI and IP.

Is AI specifically addressed in data protection laws? Are there any guidelines / soft laws relating to AI?

Saudi Arabia does not have data protection laws that specifically address AI. However, the Personal Data Protection Law in KSA (KSA PDPL) addresses automated processing. The KSA PDPL includes provisions that regulate how personal data can be processed using automated means, particularly when such processing results in decisions that significantly affect individuals. The law aims to ensure that data subjects are protected from potentially adverse effects of automated decision-making.

In addition, AI-related data processing activities are subject to the general data protection framework in the country. The primary legislation governing data protection in Saudi Arabia is the KSA PDPL, which was enacted to safeguard personal data and ensure privacy rights.

While the KSA PDPL does not specifically mention AI, its provisions are relevant to AI systems that handle personal data. Key aspects of the PDPL include requirements for data collection, processing, consent, data subject rights, and data security, all of which apply to AI applications that process personal data.

In terms of guidelines or soft laws, SDAIA and other relevant bodies have been working on frameworks and strategies to guide the ethical and responsible use of AI. These initiatives often emphasise data governance, ethical AI use, and privacy considerations, which indirectly relate to data protection in the context of AI.

For example, SDAIA's focus on AI ethics includes principles that promote transparency, accountability, and respect for privacy, which are crucial when deploying AI systems that handle personal data. These principles and strategies help shape the responsible use of AI and ensure compliance with data protection standards.

Who are the competent AI supervisory authorities in your jurisdiction? 

The main authority responsible for overseeing and advancing the country's AI agenda is the Saudi Data and Artificial Intelligence Authority (SDAIA). Established in 2019, SDAIA plays a central role in shaping AI policies, strategies, and initiatives in the Kingdom.

Other governmental bodies and institutions may also be involved in AI-related activities, particularly in areas such as education, research, and specific industry applications:

• Ministry of Communications and Information Technology: Involved in digital transformation initiatives, including AI.
• King Abdulaziz City for Science and Technology: Engages in scientific research and technological development, including AI research projects.
• National Cybersecurity Authority: Ensures cybersecurity measures are in place, which is relevant for AI systems dealing with sensitive data.

Are there any publicly known enforcement actions in relation to AI?

N/A

Are there any other sector specific laws or guideline / soft laws (e.g. finance, healthcare etc.) where AI is specifically addressed?

Saudi Arabia has not implemented sector-specific laws that explicitly address AI in areas such as finance or healthcare. However, there are ongoing efforts and initiatives to integrate AI into various sectors, and these efforts often involve developing guidelines and frameworks that indirectly relate to AI.

• Healthcare: The Saudi Ministry of Health and related organisations are actively exploring AI applications to improve healthcare services, such as diagnostics, patient management, and operational efficiency. While there may not be specific laws targeting AI in healthcare, there are likely to be guidelines and best practices developed to ensure that AI technologies are used safely and ethically. These would align with broader healthcare regulations and standards.

• Finance: The Saudi Central Bank and the Capital Market Authority oversee the financial sector, which is increasingly adopting AI for tasks like fraud detection, risk management, and customer service. While specific AI regulations may not be in place, financial institutions are expected to comply with existing regulations on data protection, cybersecurity, and financial conduct, which would apply to AI-driven processes.

• Energy and Utilities: Saudi Arabia's energy sector is exploring AI for optimising operations and enhancing efficiency. While specific AI regulations may not exist, the sector is subject to general industry regulations and standards that would govern AI applications.

• Transportation and Smart Cities: Initiatives like the development of NEOM, a smart city project, involve significant AI integration for urban planning, transportation, and infrastructure management. Guidelines for these projects likely include considerations for AI use, focusing on innovation and sustainability.

*Information is accurate up to 30 April 2025