Saudi Arabia's PDPL is the Kingdom's first comprehensive data protection law, entering into force on 14 September 2023 alongside its Implementing Regulations. A transition period ended on 14 September 2024, after which the law became fully enforceable by SDAIA. It establishes consent requirements, data subject rights, accountability duties, and rules for transfers outside the Kingdom.