Saudi Arabia bans the use of student data for artificial intelligence training

In a significant regulatory step to keep pace with rapid technological advancements, the National Center for E-Learning in Saudi Arabia has launched a comprehensive policy aimed at protecting the privacy of learners' data in the e-learning environment. This step regulates the collection and processing of data across all educational platforms, establishing clear boundaries to prevent the commercial exploitation of this sensitive data and ensuring its use within a secure educational framework.

The context of digital transformation and the importance of governance

This policy comes in response to the tremendous growth in the e-learning sector witnessed by the Kingdom as part of the Vision 2030 objectives, where digital platforms have become a fundamental pillar of the educational system. With the increasing reliance on big data, the urgent need has arisen for a legislative framework that guarantees data sovereignty and protects the digital rights of users. This step is part of the Kingdom's efforts to strengthen its digital infrastructure and enhance trust in electronic transactions, placing the Kingdom among the leading nations that prioritize data ethics in the digital age.

Banning the exploitation of data for artificial intelligence training

The new policy explicitly prohibits the use of student data to develop or train commercial or general artificial intelligence models outside the educational system, unless explicit and specific consent is obtained. It also forbids the use of data for marketing or advertising purposes, and prohibits its sale or integration with external sources for consumer behavior analysis, ensuring that the focus remains solely on educational objectives.

Human intervention and fateful decisions

Regarding the use of artificial intelligence technologies within the educational process, the policy imposes strict restrictions preventing automated systems from making critical decisions independently. Total reliance on algorithms in decisions such as failing, passing, or denying educational opportunities is prohibited, requiring responsible human intervention for review and oversight to ensure fairness and prevent technical bias.

Protecting the palace and data sovereignty

The policy prioritizes the privacy of children and minors, requiring parental consent as a prerequisite for any data processing and prohibiting non-educational behavioral tracking. It also mandates that service providers store data within the Kingdom in accordance with sovereign regulations and implement the highest standards of cybersecurity and encryption. Compliance with these controls is a fundamental requirement for obtaining e-learning licenses, reflecting the regulatory authorities' commitment to ensuring the quality and reliability of the sector.