# AI rules in Saudi Arabia

Saudi Arabia has no AI statute; SDAIA steers AI through ethics principles and guidelines (including 2026 deepfake guidance), alongside the Personal Data Protection Law and a draft Global AI Hub Law.

- **Approach:** Voluntary principles
- **Key bodies:** Saudi Data and Artificial Intelligence Authority (SDAIA), Communications, Space and Technology Commission (CST), National Data Management Office
- **Last reviewed:** 4 Oct 2026

## Rules (3)
- [SDAIA AI Ethics Principles](https://wheresthe.ai/rule/sa-sdaia-ai-ethics-principles/index.md): In force, Guideline. National principles and controls for responsible AI applying to public, private and non-profit entities developing or using AI in Saudi Arabia, covering fairness, privacy and security, humanity, social and environmental benefit, reliability and safety, transparency and explainability, and accountability, with risk-based controls across the AI lifecycle.
- [SDAIA Deepfakes Guidelines](https://wheresthe.ai/rule/sa-sdaia-deepfakes-guidelines/index.md): In force, Guideline, effective 8 May 2026. Guidance for deepfake technology developers, content creators and consumers that distinguishes malicious from beneficial uses and calls for explicit consent, personal-data protection, digital watermarking and source verification.
- [Global AI Hub Law (draft)](https://wheresthe.ai/rule/sa-cst-global-ai-hub-law-draft-2025/index.md): Proposed, Bill. Draft law creating private, extended and virtual 'AI hubs' in Saudi Arabia where data and services of foreign 'guest' or designated states could be governed by those states' laws under bilateral arrangements (a data-embassy model).

## Programmes and facts
- SDAIA Deepfakes Guidelines announced 8 May 2026
- Draft Global AI Hub Law (data-embassy model) consulted on from 14 Apr 2025

---
Canonical page: https://wheresthe.ai/j/sa/ · Not legal advice.