Compliance

Transfer of Personal Data

Moving or disclosing personal data to a party outside the Kingdom.

Definition

Movement or disclosure of personal data to a recipient located outside the Kingdom of Saudi Arabia, including transfers to controllers or processors abroad; covers both cross‑border transmissions and access by foreign entities. The term is defined operationally to determine the scope of the Transfer Regulation and the safeguards and procedures required under the PDPL.