In a pivotal step aimed at strengthening the digital infrastructure in Saudi Arabia, the Board of Directors of the Saudi Data and Artificial Intelligence Authority (SDAIA) approved the general rules for the secondary use of data. This move aims to maximize the utilization of the nation's data wealth in creating promising development opportunities and supporting the Kingdom's rapid economic growth.
The context of digital transformation and Vision 2030
These regulations gain particular importance when viewed within the context of Saudi Vision 2030, which places digital transformation and the building of a knowledge-based economy at the heart of its objectives. Since its establishment, the Saudi Data & Artificial Intelligence Authority (SDAIA) has worked to regulate the data sector, recognizing it as the "new oil" of the modern economy. Regulating the secondary use of data serves as a crucial link in the transition from data collection and storage to its effective utilization in developing innovative solutions that serve vital sectors.
Secondary use of data means reusing data for purposes different from those for which it was originally collected, such as scientific research, technological development, and innovation, which opens up broad horizons for researchers and entrepreneurs without the need to incur the trouble and costs of collecting data from scratch.
Key features of the new rules
These rules provide a regulatory framework that enables government and private entities to share data according to clear guidelines, striking a delicate balance between maximizing the benefits of data and protecting individual privacy. They complement the Authority's previously issued data-sharing policy, while also enhancing transparency in the mechanisms for data exchange between the public and private sectors.
The adopted document identified six fundamental principles that cannot be deviated from when using data secondarily, namely:
- Privacy and personal data protection in accordance with the Personal Data Protection System.
- Responsible and ethical use of data.
- Ensuring data quality and security.
- Prioritizing the public interest.
- Compliance with cybersecurity regulatory requirements.
- Respecting intellectual property rights.
Expected economic and developmental impact
This regulation is expected to revolutionize the local innovation landscape, improving the quality of decision-making within government entities and increasing spending efficiency by reducing duplication in data collection. These rules will also play a pivotal role in providing artificial intelligence algorithms with the necessary data for training and development, further solidifying the Kingdom's position as a regional and global hub for technology and innovation.
Furthermore, the rules set out a detailed mechanism for regulating requests via the “Data Marketplace” platform or other secure means, requiring a legitimate non-profit purpose in some cases, and limiting the amount of data needed, thus ensuring a safe and reliable environment for information exchange.
This step confirms the Kingdom’s commitment to moving forward in strengthening data governance, expanding its use to support sustainable development, and building a digital future that respects statutory rights and protects the interests of individuals and institutions alike.
