Saudi Arabia — PDPL DSAR Deadline Calculator
Calculate your exact response deadline under Personal Data Protection Law (Royal Decree M/19) (PDPL).
Your deadline will appear here
Select a jurisdiction and request type to get started
PDPL Overview
Full Name
Personal Data Protection Law (Royal Decree M/19)
Effective Since
2023-09-14
Regulatory Authority
Saudi Data and Artificial Intelligence Authority (SDAIA)
Official Text
View lawUp to SAR 5M for violations; imprisonment up to 2 years for serious breaches
Request Types & Deadlines
| Request Type | Deadline | Extension |
|---|---|---|
Right of Access Art. 4 — Right to know and access personal data | 30 days | Not available |
Right to Correction Art. 4 — Right to request correction of inaccurate data | 30 days | Not available |
Right to Deletion Art. 4 — Right to request destruction of personal data | 30 days | Not available |
Extension Rules
PDPL does not provide for deadline extensions under standard circumstances.
Special Rules & Common Mistakes
- •Must respond to data subject requests within 30 calendar days
- •No formal extension mechanism under the PDPL
- •SDAIA oversees enforcement during the initial implementation period
- •Two-year grace period for compliance ended September 2025
- •Cross-border data transfer requires adequate level of protection
- •Explicit consent required for processing sensitive personal data
Compare with Other Jurisdictions
| Law | Deadline | Method | Extension |
|---|---|---|---|
| 🇸🇦 Saudi Arabia PDPL | 30 days | calendar days | No |
| 🇪🇺 EU GDPR | 1 months | calendar months | +2 months |
| 🇬🇧 UK GDPR | 1 months | calendar months | +2 months |
| 🇺🇸 CCPA | 45 days | calendar days | +45 days |
Saudi Arabia PDPL FAQ
Automate Saudi Arabia PDPL DSAR tracking
PrivacyCache tracks deadlines, captures cryptographic evidence, and generates audit-ready Deal Packs for PDPL compliance.
Start with PrivacyCache