Saudi Arabia - National AI Strategy (RAI-SA-NA-NSDAIXX-2020)
National Strategy for Data & Artificial Intelligence (NSDAI)
الاستراتيجية الوطنية للبيانات والذكاء الاصطناعي
Saudi Arabia
RAI-SA-NA-NSDAIXX-2020Saudi Arabia - National AI Strategy (RAI-SA-NA-NSDAIXX-2020) is In Force in Saudi Arabia as of 8 Sep 2026, according to openresearch-repository.anu.edu.au.
PolicyGovernance and OversightData Protection and PrivacyThe National Strategy for Data & Artificial Intelligence (NSDAI) establishes a national roadmap for Saudi public and private entities to build AI capabilities, issued by the Saudi Data & Artificial Intelligence Authority in 2020. Monitored by SDAIA, the policy took effect on 2020-10-21 and remains in force to set governance and investment targets.
Summary
The National Strategy for Data & Artificial Intelligence (NSDAI) was launched by the Saudi Data & Artificial Intelligence Authority (SDAIA) at the Global AI Summit in October 2020 and approved by the Custodian of the Two Holy Mosques earlier in 2020. The strategy establishes a comprehensive national roadmap to harness data and artificial intelligence to accelerate the Kingdom’s Vision 2030 economic and social transformation. NSDAI defines six core pillars — Ambition, Skills, Policy & Regulation, Investment, Research & Innovation, and Ecosystem — with concrete targets to be achieved by 2030. Key objectives include ranking among the top 15 countries in AI, reaching the top 10 in the Open Data Index, training and upskilling tens of thousands of citizens (targets frequently cited: 20,000 specialists and 40% basic literacy in data/AI), creating over 300 data & AI startups, and attracting approximately SAR 75 billion (circa USD 20 billion) in local and foreign investment.
To deliver on these objectives, NSDAI assigns SDAIA as the lead coordinator and directs establishment and strengthening of three technical centres (the National Data Management Office, National Centre for AI, and National Information Center) and national platforms (including the National Data Governance Platform and government cloud infrastructure). The strategy emphasizes public-sector adoption across priority sectors — education, healthcare, energy, mobility and government services — while encouraging private-sector innovation, R&D partnerships and international collaboration. It calls for updated data governance arrangements (classification, sharing, open data), alignment with emerging data protection rules (including the Personal Data Protection Law), investment vehicles and incentives, and national research capabilities including testbeds and centres of excellence.
NSDAI focuses on responsible AI principles and ethics, promoting transparency, fairness, and model validation practices while creating regulatory sandboxes to test innovations. Implementation is phased: an immediate phase (through 2025) to build capability and deploy government-led programs; a medium/long-term phase (to 2030) to deepen specializations and achieve global leadership metrics. Monitoring is to be run through SDAIA and national indices (AI readiness / data maturity), with ongoing stakeholder engagement. Enforcement and compliance rely on coordinated oversight by SDAIA, emerging implementing rules, and sectoral regulators; where enforcement intersects with personal data, the PDPL and its implementing regulations provide statutory sanctions and remedial mechanisms. The strategy is presented as an enabling national framework rather than a prescriptive penal code: specific obligations, technical standards, and penalties are delivered through subsequent policies, implementation guidelines, and applicable laws (for example the PDPL and sectoral regulations).
Full article
Read full text ↗Overview
The National Strategy for Data & Artificial Intelligence (NSDAI) was announced at the Global AI Summit in Riyadh on 21 October 2020 and articulates a nationwide ambition to transform the Kingdom into a global hub for data and AI by 2030. Led by the Saudi Data & Artificial Intelligence Authority (SDAIA), the strategy sets measurable targets (investment, human capital, startups, publication and open-data rankings), establishes institutional responsibilities and promotes a phased, ecosystem-based implementation model that combines public-sector adoption, private-sector incentives and international partnerships. The strategy documents and promotional brochure (official English brochure archived) are available publicly, including copies preserved by research repositories.
Definitions
NSDAI uses operational definitions adapted for national planning: "data" covers government and non-government datasets (structured and unstructured) used for policy and services; "AI" covers algorithmic systems, machine learning, deep learning and related analytics; "sensitive data" and personal data are governed by complementary instruments such as the Saudi Personal Data Protection Law (PDPL). The strategy distinguishes between foundational infrastructure (data platforms, compute, cloud), capability (skills, research centres), governance (policies, classification, sharing), and enabling mechanisms (investment vehicles, sandboxes, standards).
Governance and Institutional Framework
NSDAI designates SDAIA as the national coordinator and owner of the strategy with responsibility for cross-government alignment and delivery. Under SDAIA, specialised centres such as the National Data Management Office (NDMO), the National Centre for AI (NCAI) and the National Information Center (NIC) are tasked with operational roles including data governance, AI research, and national infrastructure. Implementation relies on national platforms (e.g., the National Data Governance Platform) to register datasets, manage data sharing and provide tools (DPIA, breach notification, sandbox enrolment). Ministries and agencies keep operational responsibility for deploying AI in sectoral services; SDAIA provides standards, ethics guidance and coordination. The governance model is hybrid: central coordination with delegated operational responsibilities and mechanisms for performance monitoring and cross-sectoral task forces.
Key Focus Areas
NSDAI concentrates on six strategic pillars: (1) Ambition — global leadership targets and international partnerships; (2) Skills — national capacity building, technical and basic literacy, career pathways and targeted training programs; (3) Policy & Regulation — modern, investment-friendly regulatory frameworks and ethical AI guidance; (4) Investment — public and private incentives, targeted funds and investor support programs with a headline SAR 75bn target; (5) Research & Innovation — centres of excellence, national testbeds and commercialization pathways to increase publications and intellectual output; (6) Ecosystem — supporting startups, SMEs and large-scale adoption in priority sectors (education, healthcare, energy, mobility, government). Practically, these focus areas translate into deliverables such as national datasets and open-data releases, regulatory sandboxes for privacy-enhancing technologies, AI labs in healthcare, and compute/data centre expansion. NSDAI identifies 15 streams and dozens of initiatives intended to move from proof-of-concept to scaled deployment and commercialization by 2030.
Implementation Framework
Implementation is phased and multi-layered. An immediate phase (2020–2025) prioritizes capability building — national platforms, pilot projects in five priority sectors, workforce training and early regulatory instruments. The medium/long term phase (2025–2030) focuses on specialization, scaling successful pilots, industry clustering, international benchmarks and full commercialization. Tools include regulatory sandboxes, public procurement preferences for AI-driven services, investment incentives, grants and accelerator programs. Delivery relies on measurable KPIs tracked by SDAIA and published indices (AI readiness, open data ranking). The strategy prescribes establishment of institutional mechanisms for inter-agency coordination, stakeholder forums, and public-private partnership vehicles.
Monitoring and Evaluation
Monitoring is SDAIA-led and uses national metrics aligned to NSDAI targets (investment raised, number of trained specialists, startup counts, open-data ranking, publication ranks). The strategy foresees periodic reviews, an AI readiness index for government entities and dashboards on the National Data Governance Platform. It emphasizes transparent, evidence-based evaluation and iterative program adjustment, including public reporting and international benchmarking to validate progress toward 2030 goals.
Penalties, Liability, and Appeals
NSDAI itself is a strategic framework and does not enumerate criminal penalties but establishes compliance expectations and escalation paths. Enforcement where legal obligations exist (particularly related to personal data) is governed by statutory instruments such as the Saudi Personal Data Protection Law (PDPL) and implementing regulations; these provide administrative fines, corrective orders and compliance timelines. For other strategy-related obligations, sanctions may include administrative restrictions, suspension of data access, delisting from national programs, and contractual remedies. The strategy envisages administrative review/appeal mechanisms through relevant regulators and formal dispute resolution processes as set out in implementing rules.
Relationship to Other Instruments
NSDAI is explicitly aligned with Saudi Vision 2030 and complements the PDPL, national data governance policies, cloud and infrastructure initiatives (Deem/G-Cloud) and sectoral strategies (health, education, energy, mobility). It also operates alongside new institutional frameworks (Digital Government Authority, Ministry of Communications & Information Technology) and sector regulators; implementation relies on a combination of strategy-level guidance and subordinate legally-binding instruments that prescribe technical standards, procurement rules and data protection obligations.
International Alignment
The strategy positions Saudi Arabia to collaborate internationally — with multilateral institutions, research partners and private investors — aiming to meet global benchmarking metrics (Open Data Index, AI indices). NSDAI promotes interoperable standards, participation in international research, and adoption of recognized best practices for ethics, safety and data protection. It anticipates aligning Saudi rules with international norms where possible and establishing bilateral research and investment partnerships to accelerate capability building.
Implementation Timeline
| Milestone | Planned/Actual Date | Notes |
|---|---|---|
| Royal approval of strategy | 2020-07-17 | Reported approval by the Custodian of the Two Holy Mosques (media reporting and SDAIA statements). |
| Public launch at Global AI Summit | 2020-10-21 | Official announcement and publication of strategy brochure at the Summit. |
| Immediate implementation phase (platforms, pilots) | 2020–2025 | Build national platforms, start sectoral pilots and workforce programs. |
| Medium-term scale and specialization | 2025–2030 | Scale successful pilots, deepen industry specializations and aim for global metrics by 2030. |
Sources and References
| Source | Type |
|---|---|
| National Strategy for Data & Artificial Intelligence (SDAIA page) | Primary Source |
| National Strategy for Data & AI (PDF archive) — ANU repository | Primary Source (archived brochure) |
| National Data Governance Platform (SDAIA) | Primary Source |
| "Saudi Arabia unveils national strategy for data and AI" — The National | Secondary Source |
| UNESCO G20 Tech Policy Atlas — Case Study: Saudi Arabia | Secondary Source |
Requirements for a company
What an organisation has to do under Saudi Arabia - National AI Strategy (RAI-SA-NA-NSDAIXX-2020), at a glance. Not legal advice — the table below gives the provision and deadline for each item.
Must do
0Nothing in this category.
Must not do
0Nothing in this category.
Should do
6- Register organizational datasets on the National Data Governance Platform to facilitate structured data management and cross-government sharing.Public and private entities managing datasets in Saudi Arabia
- Adhere to SDAIA standards and ethical AI guidance when deploying AI systems in sectoral services.Ministries, government agencies, and sector entities deploying AI
- Conduct Data Protection Impact Assessments (DPIA) when introducing new data-driven AI applications or processing activities.Entities processing personal or sensitive data for AI systems
- Notify relevant authorities of data breaches using tools provided on the National Data Governance Platform.Entities managing datasets and national data platform users
- Enrol in regulatory sandboxes to test privacy-enhancing technologies and AI solutions prior to full-scale deployment.AI developers, startups, and innovative technology providers
- Track and report entity-level AI metrics to support national performance evaluation and the AI readiness index.Government entities and public sector service providers
Should not do
0Nothing in this category.
Who must do what
The obligations under Saudi Arabia - National AI Strategy (RAI-SA-NA-NSDAIXX-2020), most serious first. Not legal advice — verify against the official text before relying on it.
| # | Who | Requirement | By when | Where | Severity |
|---|---|---|---|---|---|
| 1 | Public and private entities managing datasets in Saudi Arabia | Register organizational datasets on the National Data Governance Platform to facilitate structured data management and cross-government sharing. “Implementation relies on national platforms (e.g., the National Data Governance Platform) to register datasets, manage data sharing” | — | — | Recommended |
| 2 | Ministries, government agencies, and sector entities deploying AI | Adhere to SDAIA standards and ethical AI guidance when deploying AI systems in sectoral services. “Ministries and agencies keep operational responsibility for deploying AI in sectoral services; SDAIA provides standards, ethics guidance and coordination.” | — | — | Recommended |
| 3 | Entities processing personal or sensitive data for AI systems | Conduct Data Protection Impact Assessments (DPIA) when introducing new data-driven AI applications or processing activities. “provide tools (DPIA, breach notification, sandbox enrolment).” | — | — | Recommended |
| 4 | Entities managing datasets and national data platform users | Notify relevant authorities of data breaches using tools provided on the National Data Governance Platform. “provide tools (DPIA, breach notification, sandbox enrolment).” | — | — | Recommended |
| 5 | AI developers, startups, and innovative technology providers | Enrol in regulatory sandboxes to test privacy-enhancing technologies and AI solutions prior to full-scale deployment. “Tools include regulatory sandboxes, public procurement preferences for AI-driven services, investment incentives, grants and accelerator programs.” | — | — | Recommended |
| 6 | Government entities and public sector service providers | Track and report entity-level AI metrics to support national performance evaluation and the AI readiness index. “The strategy foresees periodic reviews, an AI readiness index for government entities and dashboards on the National Data Governance Platform.” | — | — | Recommended |
Related Regulations
More AI regulation in Saudi Arabia
© Regulations.AI · updated on 20 Sep 2026 · reviewed against official sources on 8 Sep 2026 using Gemini 3.6 Flash