How does  the law compare with international standards?The PDPL includes most of the essential international standards in data protection such as: data subject rights, legal basis for data processing (non consent based and consent based), privacy policies requirements, obligations of notification in case of data breaches, necessity of impact assessments before processing personal data, specific provisions on health data, credit data, controllers' obligations and due diligence, the establishment of a supervising authority and sanctions in cases of violations.The list goes on.  

Many features of the Saudi Personal Data Protection Law (PDPL) are aligned with the standards and principles contained in other international data protection laws such as the General Data Protection Regulation (GDPR) 2016/679, the regulation in EU law on data protection and privacy in the European Union and the European Economic Area.We believe that this law was passed in order to attract international businesses, especially in the new technologies field and to keep up with other Gulf countries, just like the UAE.