Detailed overview
Saudi Arabia does not currently have one comprehensive horizontal AI Act equivalent to the EU AI Act. Its AI framework is based on national AI strategy, official AI ethics principles, data and AI governance, sectoral regulation and existing laws.
SDAIA AI Ethics Principles
The Saudi Data and Artificial Intelligence Authority, SDAIA, has issued official AI Ethics Principles. These principles are intended to support responsible AI development and use in line with national strategies and to reduce negative impacts and risks associated with AI systems. They are relevant for organisations that design, develop, deploy, implement or use AI systems in Saudi Arabia.
The AI Ethics Principles are aimed at building trustworthy AI. They address governance, accountability, transparency, fairness, human oversight, safety, privacy, security and responsible use. They are not the same as a single statutory AI licensing regime, but they are an important official benchmark for AI projects in Saudi Arabia.
Ethics self-assessment and other tools
Saudi Arabia also operates an AI ethics self-assessment service through the National Data Governance Platform. The service allows controllers to compare their current AI practices with ethical criteria and assess their level of ethical commitment in the development and application of AI technologies.
Saudi Arabia has official tools and initiatives connected with AI service provider accreditation, regulatory sandboxes and generative AI guidance for government entities. These materials reflect a governance-first approach focused on responsible adoption, data protection, public-sector use and AI capability development.
Existing-law overlays
AI systems in Saudi Arabia may also be regulated under existing laws. AI involving personal data may trigger personal-data protection obligations. AI used in finance, healthcare, telecoms, education, government, cybersecurity, employment or consumer services may be subject to sector-specific rules. AI misuse may also trigger civil, administrative or criminal liability depending on the conduct.
Penalties
Saudi Arabia does not currently have one general AI-specific penalty table equivalent to the EU AI Act. Penalties depend on the underlying law breached, such as data protection, cybersecurity, criminal law, sectoral regulation or licensing rules.