Saudi data watchdog issues penalties over personal data breaches

The committees, operating under the Saudi Data and Artificial Intelligence Authority (SDAIA), issued 48 decisions last year confirming violations and enforcing the penalties prescribed under Article 36 of the law.

According to SDAIA, the confirmed breaches included the unlawful collection and processing of personal data, the disclosure of personal information without legal justification, and failures by data controllers to put in place appropriate organisational, administrative and technical measures to protect personal data.

The violations also covered the sending of advertising and marketing messages to individuals without their consent.

SDAIA said the actions form part of its ongoing efforts to oversee implementation of the Personal Data Protection Law and its regulations.

The authority added that enforcement is aimed at strengthening responsible data-handling practices, protecting individuals’ personal information and reinforcing trust in digital activities across the Kingdom.