ISO 27001 and Saudi Arabia’s PDPL: What Organisations Need to Do in 2026
For years, the question organisations in Saudi Arabia asked about data protection compliance was: when will enforcement actually start? That question has been answered. Between 2025 and 2026, Saudi Arabia’s Data and Artificial Intelligence Authority (SDAIA) issued 48 formal enforcement decisions against organisations found to have violated the Personal Data Protection Law (PDPL). The violations […]