Saudi Arabia - National AI Strategy (RAI-SA-NA-NSDAIXX-2020)

National Strategy for Data & Artificial Intelligence (NSDAI)

الاستراتيجية الوطنية للبيانات والذكاء الاصطناعي

Saudi Arabia

RAI-SA-NA-NSDAIXX-2020
Effective: 21 Oct 2020
In Force(In Force)As published at sdaia.gov.sa · checked 8 Sep 2026

Saudi Arabia - National AI Strategy (RAI-SA-NA-NSDAIXX-2020) is In Force in Saudi Arabia as of 8 Sep 2026, according to openresearch-repository.anu.edu.au.

PolicyGovernance and OversightData Protection and Privacy
Export PDF

The National Strategy for Data & Artificial Intelligence (NSDAI) establishes a national roadmap for Saudi public and private entities to build AI capabilities, issued by the Saudi Data & Artificial Intelligence Authority in 2020. Monitored by SDAIA, the policy took effect on 2020-10-21 and remains in force to set governance and investment targets.

Summary

The National Strategy for Data & Artificial Intelligence (NSDAI) was launched by the Saudi Data & Artificial Intelligence Authority (SDAIA) at the Global AI Summit in October 2020 and approved by the Custodian of the Two Holy Mosques earlier in 2020. The strategy establishes a comprehensive national roadmap to harness data and artificial intelligence to accelerate the Kingdom’s Vision 2030 economic and social transformation. NSDAI defines six core pillars — Ambition, Skills, Policy & Regulation, Investment, Research & Innovation, and Ecosystem — with concrete targets to be achieved by 2030. Key objectives include ranking among the top 15 countries in AI, reaching the top 10 in the Open Data Index, training and upskilling tens of thousands of citizens (targets frequently cited: 20,000 specialists and 40% basic literacy in data/AI), creating over 300 data & AI startups, and attracting approximately SAR 75 billion (circa USD 20 billion) in local and foreign investment.

To deliver on these objectives, NSDAI assigns SDAIA as the lead coordinator and directs establishment and strengthening of three technical centres (the National Data Management Office, National Centre for AI, and National Information Center) and national platforms (including the National Data Governance Platform and government cloud infrastructure). The strategy emphasizes public-sector adoption across priority sectors — education, healthcare, energy, mobility and government services — while encouraging private-sector innovation, R&D partnerships and international collaboration. It calls for updated data governance arrangements (classification, sharing, open data), alignment with emerging data protection rules (including the Personal Data Protection Law), investment vehicles and incentives, and national research capabilities including testbeds and centres of excellence.

NSDAI focuses on responsible AI principles and ethics, promoting transparency, fairness, and model validation practices while creating regulatory sandboxes to test innovations. Implementation is phased: an immediate phase (through 2025) to build capability and deploy government-led programs; a medium/long-term phase (to 2030) to deepen specializations and achieve global leadership metrics. Monitoring is to be run through SDAIA and national indices (AI readiness / data maturity), with ongoing stakeholder engagement. Enforcement and compliance rely on coordinated oversight by SDAIA, emerging implementing rules, and sectoral regulators; where enforcement intersects with personal data, the PDPL and its implementing regulations provide statutory sanctions and remedial mechanisms. The strategy is presented as an enabling national framework rather than a prescriptive penal code: specific obligations, technical standards, and penalties are delivered through subsequent policies, implementation guidelines, and applicable laws (for example the PDPL and sectoral regulations).

Full article

Read full text ↗

Overview

The National Strategy for Data & Artificial Intelligence (NSDAI) was announced at the Global AI Summit in Riyadh on 21 October 2020 and articulates a nationwide ambition to transform the Kingdom into a global hub for data and AI by 2030. Led by the Saudi Data & Artificial Intelligence Authority (SDAIA), the strategy sets measurable targets (investment, human capital, startups, publication and open-data rankings), establishes institutional responsibilities and promotes a phased, ecosystem-based implementation model that combines public-sector adoption, private-sector incentives and international partnerships. The strategy documents and promotional brochure (official English brochure archived) are available publicly, including copies preserved by research repositories.

Definitions

NSDAI uses operational definitions adapted for national planning: "data" covers government and non-government datasets (structured and unstructured) used for policy and services; "AI" covers algorithmic systems, machine learning, deep learning and related analytics; "sensitive data" and personal data are governed by complementary instruments such as the Saudi Personal Data Protection Law (PDPL). The strategy distinguishes between foundational infrastructure (data platforms, compute, cloud), capability (skills, research centres), governance (policies, classification, sharing), and enabling mechanisms (investment vehicles, sandboxes, standards).

Governance and Institutional Framework

NSDAI designates SDAIA as the national coordinator and owner of the strategy with responsibility for cross-government alignment and delivery. Under SDAIA, specialised centres such as the National Data Management Office (NDMO), the National Centre for AI (NCAI) and the National Information Center (NIC) are tasked with operational roles including data governance, AI research, and national infrastructure. Implementation relies on national platforms (e.g., the National Data Governance Platform) to register datasets, manage data sharing and provide tools (DPIA, breach notification, sandbox enrolment). Ministries and agencies keep operational responsibility for deploying AI in sectoral services; SDAIA provides standards, ethics guidance and coordination. The governance model is hybrid: central coordination with delegated operational responsibilities and mechanisms for performance monitoring and cross-sectoral task forces.

Key Focus Areas

NSDAI concentrates on six strategic pillars: (1) Ambition — global leadership targets and international partnerships; (2) Skills — national capacity building, technical and basic literacy, career pathways and targeted training programs; (3) Policy & Regulation — modern, investment-friendly regulatory frameworks and ethical AI guidance; (4) Investment — public and private incentives, targeted funds and investor support programs with a headline SAR 75bn target; (5) Research & Innovation — centres of excellence, national testbeds and commercialization pathways to increase publications and intellectual output; (6) Ecosystem — supporting startups, SMEs and large-scale adoption in priority sectors (education, healthcare, energy, mobility, government). Practically, these focus areas translate into deliverables such as national datasets and open-data releases, regulatory sandboxes for privacy-enhancing technologies, AI labs in healthcare, and compute/data centre expansion. NSDAI identifies 15 streams and dozens of initiatives intended to move from proof-of-concept to scaled deployment and commercialization by 2030.

Implementation Framework

Implementation is phased and multi-layered. An immediate phase (2020–2025) prioritizes capability building — national platforms, pilot projects in five priority sectors, workforce training and early regulatory instruments. The medium/long term phase (2025–2030) focuses on specialization, scaling successful pilots, industry clustering, international benchmarks and full commercialization. Tools include regulatory sandboxes, public procurement preferences for AI-driven services, investment incentives, grants and accelerator programs. Delivery relies on measurable KPIs tracked by SDAIA and published indices (AI readiness, open data ranking). The strategy prescribes establishment of institutional mechanisms for inter-agency coordination, stakeholder forums, and public-private partnership vehicles.

Monitoring and Evaluation

Monitoring is SDAIA-led and uses national metrics aligned to NSDAI targets (investment raised, number of trained specialists, startup counts, open-data ranking, publication ranks). The strategy foresees periodic reviews, an AI readiness index for government entities and dashboards on the National Data Governance Platform. It emphasizes transparent, evidence-based evaluation and iterative program adjustment, including public reporting and international benchmarking to validate progress toward 2030 goals.

Penalties, Liability, and Appeals

NSDAI itself is a strategic framework and does not enumerate criminal penalties but establishes compliance expectations and escalation paths. Enforcement where legal obligations exist (particularly related to personal data) is governed by statutory instruments such as the Saudi Personal Data Protection Law (PDPL) and implementing regulations; these provide administrative fines, corrective orders and compliance timelines. For other strategy-related obligations, sanctions may include administrative restrictions, suspension of data access, delisting from national programs, and contractual remedies. The strategy envisages administrative review/appeal mechanisms through relevant regulators and formal dispute resolution processes as set out in implementing rules.

Relationship to Other Instruments

NSDAI is explicitly aligned with Saudi Vision 2030 and complements the PDPL, national data governance policies, cloud and infrastructure initiatives (Deem/G-Cloud) and sectoral strategies (health, education, energy, mobility). It also operates alongside new institutional frameworks (Digital Government Authority, Ministry of Communications & Information Technology) and sector regulators; implementation relies on a combination of strategy-level guidance and subordinate legally-binding instruments that prescribe technical standards, procurement rules and data protection obligations.

International Alignment

The strategy positions Saudi Arabia to collaborate internationally — with multilateral institutions, research partners and private investors — aiming to meet global benchmarking metrics (Open Data Index, AI indices). NSDAI promotes interoperable standards, participation in international research, and adoption of recognized best practices for ethics, safety and data protection. It anticipates aligning Saudi rules with international norms where possible and establishing bilateral research and investment partnerships to accelerate capability building.

Implementation Timeline

MilestonePlanned/Actual DateNotes
Royal approval of strategy2020-07-17Reported approval by the Custodian of the Two Holy Mosques (media reporting and SDAIA statements).
Public launch at Global AI Summit2020-10-21Official announcement and publication of strategy brochure at the Summit.
Immediate implementation phase (platforms, pilots)2020–2025Build national platforms, start sectoral pilots and workforce programs.
Medium-term scale and specialization2025–2030Scale successful pilots, deepen industry specializations and aim for global metrics by 2030.

Sources and References

SourceType
National Strategy for Data & Artificial Intelligence (SDAIA page)Primary Source
National Strategy for Data & AI (PDF archive) — ANU repositoryPrimary Source (archived brochure)
National Data Governance Platform (SDAIA)Primary Source
"Saudi Arabia unveils national strategy for data and AI" — The NationalSecondary Source
UNESCO G20 Tech Policy Atlas — Case Study: Saudi ArabiaSecondary Source

Requirements for a company

What an organisation has to do under Saudi Arabia - National AI Strategy (RAI-SA-NA-NSDAIXX-2020), at a glance. Not legal advice — the table below gives the provision and deadline for each item.

Must do

0

Nothing in this category.

Must not do

0

Nothing in this category.

Should do

6
  • Register organizational datasets on the National Data Governance Platform to facilitate structured data management and cross-government sharing.Public and private entities managing datasets in Saudi Arabia
  • Adhere to SDAIA standards and ethical AI guidance when deploying AI systems in sectoral services.Ministries, government agencies, and sector entities deploying AI
  • Conduct Data Protection Impact Assessments (DPIA) when introducing new data-driven AI applications or processing activities.Entities processing personal or sensitive data for AI systems
  • Notify relevant authorities of data breaches using tools provided on the National Data Governance Platform.Entities managing datasets and national data platform users
  • Enrol in regulatory sandboxes to test privacy-enhancing technologies and AI solutions prior to full-scale deployment.AI developers, startups, and innovative technology providers
  • Track and report entity-level AI metrics to support national performance evaluation and the AI readiness index.Government entities and public sector service providers

Should not do

0

Nothing in this category.

Who must do what

The obligations under Saudi Arabia - National AI Strategy (RAI-SA-NA-NSDAIXX-2020), most serious first. Not legal advice — verify against the official text before relying on it.

#WhoRequirementBy whenWhereSeverity
1Public and private entities managing datasets in Saudi ArabiaRegister organizational datasets on the National Data Governance Platform to facilitate structured data management and cross-government sharing.
“Implementation relies on national platforms (e.g., the National Data Governance Platform) to register datasets, manage data sharing”
——Recommended
2Ministries, government agencies, and sector entities deploying AIAdhere to SDAIA standards and ethical AI guidance when deploying AI systems in sectoral services.
“Ministries and agencies keep operational responsibility for deploying AI in sectoral services; SDAIA provides standards, ethics guidance and coordination.”
——Recommended
3Entities processing personal or sensitive data for AI systemsConduct Data Protection Impact Assessments (DPIA) when introducing new data-driven AI applications or processing activities.
“provide tools (DPIA, breach notification, sandbox enrolment).”
——Recommended
4Entities managing datasets and national data platform usersNotify relevant authorities of data breaches using tools provided on the National Data Governance Platform.
“provide tools (DPIA, breach notification, sandbox enrolment).”
——Recommended
5AI developers, startups, and innovative technology providersEnrol in regulatory sandboxes to test privacy-enhancing technologies and AI solutions prior to full-scale deployment.
“Tools include regulatory sandboxes, public procurement preferences for AI-driven services, investment incentives, grants and accelerator programs.”
——Recommended
6Government entities and public sector service providersTrack and report entity-level AI metrics to support national performance evaluation and the AI readiness index.
“The strategy foresees periodic reviews, an AI readiness index for government entities and dashboards on the National Data Governance Platform.”
——Recommended

© Regulations.AI · updated on 20 Sep 2026 · reviewed against official sources on 8 Sep 2026 using Gemini 3.6 Flash