Kingdom of Saudi Arabia

“3.10.1 Any violation of the provisions of [the CITC’s Cloud Computing Regulatory Framework] shall be subject to the penalties that the Commission may impose under Commission Statutes, without prejudice to any penalties that may be imposed under any other applicable law in the Kingdom. Such other applicable law includes, in particular: the Anti-Cyber Crime Law (issued under the Council of Ministers Decision No. 79, dated 7/3/1428 H, and approved by Royal Decree No. M/17, dated 8/3/1428H) and the Electronic Transactions Law (issued under the Council of Ministers Decision No. 80 dat-ed 7/3/1428 H and approved by Royal Decree No. M/18 dated of 8/3/1428H), and any provisions that may amend or replace them in the future.”