Businesses developing products or services that process personal data can apply for supervised testing through a newly opened track of Saudi Arabia’s Data Regulatory Sandbox.
The Saudi Data and Artificial Intelligence Authority announced registration on Monday, 5 October 2026, according to a Saudi Press Agency report published the following day. SPA says applications will remain open for two months.
The Personal Data Protection Track supports testing under regulatory supervision, helping participants assess how their products align with the Personal Data Protection Law and its implementing regulations during development.
SPA’s announcement calls for licensed private entities operating in Saudi Arabia whose products process personal data and which are registered in the National Personal Data Protection Register. The National Data Governance Platform provides the application route and official eligibility details.
The platform says participation, expert guidance and workshops are free. Applications undergo assessment before admission, with testing plans tailored to each product or service.
Source: Saudi Press Agency, 6 October 2026.
Additional source: SDAIA Data Regulatory Sandbox service information, checked 6 October 2026.