Saudi Arabia reports 48 penalty decisions as data protection enforcement goes live

Company: Multiple data controllers (not named)
Regulator or court: Saudi Data and AI Authority (SDAIA) – Committees for Reviewing PDPL Violations
Law: Personal Data Protection Law (PDPL)
Status: Decisions issued; details of individual cases not published

What happened

Saudi Arabia's data and AI authority announced that its violation review committees had issued 48 decisions against organisations that broke the Personal Data Protection Law. The breaches included collecting or disclosing personal data without a legal basis, weak security measures, and sending marketing messages without consent. Fines can reach SAR 5 million and double for repeat offences.

Sources

Riyadh Daily (Saudi Press Agency)Clyde & Co – Enforcement of the Saudi PDP Law is live IAPP – Saudi DPA steps up enforcement

Summary in our own words. General information, not legal advice.

What happened

Coupang hit with Korea's biggest ever privacy fine after insider data leak

GM pays record $12.75m for selling drivers' location and driving data

Colombia shuts down Worldcoin's iris-scanning and orders data deleted

Could this happen to you? Let’s find out.