Bad Luck for Me

I spent a good deal of February researching and writing a brief volume titled, Saudi Arabia Privacy Law, anticipating the effective date of Saudi Arabia’s own personal data protection law, modeled after the European Union’s GDPR. Unfortunately for me, one day before the law was to take effect, the Saudi regulator postponed enforcement of the law for one year. Since the law itself contains a one-year enforcement grace period, that means the law won’t take effect until 17 March 2024. Between now and then, the law’s implementing regulations as well as the law itself will be substantially modified from their present form.

The book will have to be substantially revised as well. Oh well.