ANNOUNCEMENT 14 Mar 2019
Saudi Arabia has imposed restrictions on cloud computing service providers regarding storage and transfer of data.
NUMBER OF INTERVENTIONS
Cloud Computing Regulatory Framework
On 14 March 2019, the Communications and Information Technology Commission (CITC) of Saudi Arabia published the Cloud Computing Regulatory Framework. The regulation establishes that cloud computing service providers registered with the CITC and cloud computing subscribers are not allowed to transfer any content from the Saudi government data outside the country for any purpose or in form, whether temporarily or permanently unless it is expressly permitted by any other law or regulation of Saudi Arabia.
Further, the framework requires that cloud service providers must inform in advance the CITC and the cloud subscribers and get their approval before transferring, storing, or processing outside the Kingdom any content of the subscriber whether temporarily or permanently.