SDAIA AI Framework
Saudi Arabia SDAIA AI Governance Framework
Comprehensive AI governance from Saudi Data & AI Authority: Ethics Principles (Sep 2023), Generative AI Guidelines (Jan 2024), AI Adoption Framework (Sep 2024). Combined with PDPL creates binding + guidance framework.
Jurisdiction
Saudi Arabia
Enacted
Sep 1, 2023
Effective
Sep 1, 2023
Enforcement
SDAIA; National Data Management Office (NDMO)
Why It Matters
Major Gulf market with AI investment. PDPL has extraterritorial reach. GenAI Guidelines specifically address chatbots.
Recent Developments
PDPL fully enforced September 2024 with extraterritorial reach.
At a Glance
Requires
Who Must Comply
- AI deployers in Saudi Arabia
- Data controllers/processors under PDPL
Obligations fall on:
Safety Provisions
- AI Ethics Principles: Fairness, transparency, accountability, safety, privacy
- Generative AI Guidelines: Output validation, bias prevention, human oversight
- AI Adoption Framework: Governance, risk assessment, implementation
- PDPL: Sensitive data (health, children) requires explicit consent
- PDPL: Automated decision disclosure
- PDPL: Children = under 18
Compliance & Enforcement
Penalties
SAR 5M
Primary Source
SDAIA
https://sdaia.gov.sa/
View on map
Saudi Arabia
Focus Areas
Cite This
APA
Saudi Arabia. (2023). Saudi Arabia SDAIA AI Governance Framework.
Related Regulations
Saudi Arabia PDPL
Saudi Arabia's comprehensive personal data protection law with extraterritorial scope, DPO requirements for sensitive processing, and National Data Governance Platform registration.
Egypt AI Strategy 2025
Ambitious national strategy positioning Egypt as regional AI hub for Africa and Middle East. Targets 7.7% ICT sector GDP contribution by 2030, training 30,000 AI specialists, establishing 250 AI companies. Built on six strategic pillars: governance, infrastructure, technology, data, ecosystem, and talent. Accompanied by Egyptian Charter for Responsible AI (April 2023) with ethics principles.
Qatar QCB AI Guidelines
Binding AI governance requirements for Qatar's financial sector. Mandates board-level accountability, risk assessments, human-in-the-loop for high-impact decisions, and prior QCB approval for high-risk AI systems.
DIFC AI Regulation
First enacted AI-specific regulation in the Middle East, Africa, and South Asia (MEASA) region. Establishes risk-based framework for AI systems in the DIFC financial free zone, with requirements for transparency, human oversight, and accountability.
Israel Privacy Amendment 13
Israel's most significant privacy reform in 40 years, explicitly covering AI systems. Requires Data Protection Officers (DPOs) for entities processing sensitive data at scale, mandates Data Protection Impact Assessments (DPIAs) before AI deployment, and enhances Protection of Privacy Authority enforcement powers. One of first data protection laws to explicitly require DPIAs before AI development or deployment.
Jordan PDPL
Jordan's data protection law with medical data processing exceptions, data portability rights, and oversight including security services.
Last updated February 17, 2026. Verify against primary sources before relying on this information.