🇸🇦 Arabic, 31 October 2026, cybersecurity regulation
25 Million Riyal Fine for Unlicensed Cybersecurity Activities
Fines for large enterprises engaging in unlicensed cybersecurity activities range from 5 to 25 million riyals.
The National Cybersecurity Agency’s board of directors has adopted a classification table for cybersecurity violations and their corresponding penalties, based on the agency’s regulatory powers and considering the nature, frequency, and severity of the violations.
The table includes fines for unlicensed cybersecurity activities, non-compliance with licensing conditions, and failure to meet data protection and cloud computing requirements.
Penalties vary depending on the size of the enterprise, the type of violation, and the level of severity, with the possibility of suspending activities or services.