Login using IAM
The following words and phrases, wherever mentioned in this Law, shall have the meaning assigned thereto, unless the context requires otherwise:
Kingdom: The Kingdom of Saudi Arabia.
Law: Global AI Hub Law.
Competent Authority: The entity or entities designated as such by a resolution of the Council of Ministers.
Private Hub: A data centre (or an isolated and clearly demarcated part of a data centre) located in the Kingdom that is exclusively dedicated to hosting the data, applications, infrastructure and services of a Guest Country, for the sole use of such Guest Country and according to the laws and regulations applicable in such Guest Country, to be operated as and enjoying the benefits provided pursuant to this Law.
Extended Hub: A data centre (or an isolated and clearly demarcated part of a data centre) located in the Kingdom that is dedicated to hosting the data, applications, infrastructure and services of an Operator that wishes to operate in such data centre (for itself or its own subscribers) according to the laws and regulations applicable in the relevant Guest Country, to be operated as and enjoying the benefits provided pursuant to this Law.
Virtual Hub: A data centre (or an isolated and clearly demarcated part of a data centre) located in the Kingdom that is used by a Service Provider to host the data, applications and services of its Customers, where such data, applications and services are subject to the laws and regulations applicable in a Designated Foreign State in accordance with this Law.
Guest Country: A foreign state that enters into a Bilateral Agreement with the Kingdom to establish a Private Hub or an Extended Hub pursuant to this Law.
Operator: A party that enters into an Agreement with the Competent Authority to operate an Extended Hub pursuant to an arrangement with a Guest Country.
Designated Foreign State: Any foreign state or states approved in accordance with this Law for the purpose of operating the Virtual Hub where the Customer Content will be subject to laws and regulations applicable in such state.
Service Provider: A party operating and incorporated in the Kingdom that is authorized to provide Virtual Hub offerings pursuant to an approval under this Law.
Customer: A party that has entered into a contract with a Service Provider for the provision of a Virtual Hub offering.
Customer Content: Any software, applications, data, text, audio, video, or images that a Customer or its end users store, transmit or process via a Virtual Hub, in any form or manner.
Bilateral Agreement: An international agreement concluded between the Kingdom and a foreign state for the purpose of this Law and subject to international law.
Agreement: Any type of agreement between the Competent Authority and an Operator or Service Provider for the purpose of this Law.
This Law aims to achieve the following:
1. Enhance the Kingdom's position as a global digital hub and a pioneer in advanced technologies by fostering an attractive environment for foreign governments and private sector entities to develop and adopt such technologies for peaceful purposes and uses.
2. Maximize the benefit of the Kingdom's strategic geographical location connecting three continents to offer technology solutions for the benefit of global business and consumers in a way that enhances access to technology and bridges the digital divide in a sustainable manner.
3. Facilitate the establishment of sovereign data centres that strengthen bilateral relationships with foreign states, hyperscalers and other digital service providers by offering continuity of service, data sovereignty beyond borders, enhanced security and future-proofed digital infrastructure.
4. Support innovation, entrepreneurship and research and development in advanced technologies within the Kingdom by broadening opportunities to participate in the digital economy.
1. No Private Hub may be operated in the Kingdom without applying the provisions of this Law.
2. The Competent Authority is authorized to enter into discussions with prospective Guest Countries with regard to the entry into Bilateral Agreements with the Kingdom to support the establishment of a Private Hub, including any other obligation or any operational or financial consideration for the same.
3. Upon the recommendation of the Competent Authority, the Kingdom may, pursuant to the applicable laws, execute the Bilateral Agreements with Guest Countries referred to in Paragraph (2) of this Article to establish any Private Hub pursuant to this Law.
1. Each Guest Country shall manage the operation of the data centre(s) identified as a Private Hub according to the objectives of this Law and subject to the terms of the Bilateral Agreement and under its full responsibility and liability.
2. The Kingdom shall recognize appropriate immunities and privileges for the staff, premises, communications, data and technology stack of the Private Hub within the parameters and consistent with the principles of the relevant international treaties, in accordance with the Bilateral Agreement concluded with the Guest Country.
3. The Kingdom shall provide each Private Hub with the necessary protection, connectivity and resources to ensure the continued operation of each Private Hub, in accordance with its obligations under applicable international treaties and the Bilateral Agreement concluded with the Guest Country.
4. The Guest Country shall ensure:
(a) that the operation of the Private Hub complies with all requirements of applicable international law, and the Guest Country shall bear full responsibility for the same before the Kingdom and the international community;
(b) that the operation of the Private Hub shall not be used in any manner incompatible with the purpose of this Law;
(c) full compliance with any international restrictions on the import or use of any data, hardware, software or other technology within the Private Hub, including applicable export controls and licensing requirements; and
(d) full cooperation with the Kingdom's authorities to ensure that the Private Hub continues to support (and does not disrupt) the Kingdom's digital infrastructure, in accordance with the Bilateral Agreement concluded with the Guest Country.
5. The relevant authorities or emergency services in the Kingdom may enter any Private Hub or Extended Hub and take any immediate protective or precautionary measures in cases of fire, flood, or other threat or national emergency requiring such measures in accordance with the applicable international treaties, the laws of the Kingdom, the Bilateral Agreement with the Guest Country, and any other applicable laws.
1. No Extended Hub may be operated in the Kingdom without applying the provisions of this Law.
2. The Competent Authority is authorized to enter into discussions with:
(a) prospective Guest Countries with regard to the entry into Bilateral Agreements with the Kingdom to support the establishment of an Extended Hub; and
(b) prospective Operators with regard to the entry into an Agreement with the Competent Authority to support the management and operation of an Extended Hub,
including, in each case, any other obligation or any operational or financial consideration for the same.
3. Upon the recommendation of the Competent Authority, the Kingdom may, pursuant to the applicable laws execute the Bilateral Agreements with Guest Countries referred to in Paragraph (2)(a) of this Article to establish any Extended Hub pursuant to this Law.
4. Pursuant to the approval of the Council of Ministers and the execution of a Bilateral Agreement with the Guest Country, the Competent Authority may conclude an Agreement with Operators referred to in Paragraph (2)(b) of this Article.
1. Each Operator shall manage the operation of the data centre(s) identified as an Extended Hub according to the objectives of this Law and subject to the terms of such an Agreement and under its full responsibility and liability.
2. Each Guest Country shall guarantee the compliance of all Operators of its Extended Hub with applicable laws and regulations, including a commitment to apply international best practices for data protection, cybersecurity and the provision of data centre related services.
3. Unless otherwise stated or modified pursuant to any applicable Bilateral Agreement, the provisions of Article 4 of this Law which are applicable to the Private Hub shall apply to Extended Hub.
4. Without prejudice to Paragraph (1) of this Article, any Operator operating or providing services within the Kingdom outside the Extended Hub shall be subject to and shall comply with this Law and any other laws of the Kingdom in relation to the provision of such services in the Kingdom, unless otherwise exempted by the Council of Ministers.
1. No Virtual Hub may be operated in the Kingdom without applying the provisions of this Law, and each Service Provider approved pursuant to this Article shall be entitled to operate its data centre(s) in the Kingdom as a Virtual Hub.
(a) foreign governments or other relevant authorities, as necessary, to support the operation of a Virtual Hub granting data sovereignty to a foreign state in accordance with this Law; and
(b) prospective Service Providers with regard to the operation of a Virtual Hub and to nominate Designated Foreign States,
3. Pursuant to the approval of the Council of Ministers in accordance with applicable laws, the Competent Authority shall approve:
(a) each Designated Foreign State; and
(b) each Service Provider and its associated Virtual Hub.
4. If a Service Provider has more than one data centre in the Kingdom, the approval of a Virtual Hub pursuant to Paragraph (3)(b) of this Article (or cancellation thereof) shall apply to all data centres of that Service Provider unless otherwise specified in the corresponding notice.
1. Any Customer Content stored, transmitted or processed within a Virtual Hub shall be subject to the laws applicable in the Designated Foreign State in which the Customer is domiciled or incorporated.
2. Any Customer Content stored, transmitted or processed within a Virtual Hub shall be subject to the exclusive jurisdiction, responsibility and liability of the competent courts and public authorities of a Designated Foreign State as set out in Paragraph (1) of this Article. Such courts and authorities are specifically authorized to:
(a) exercise appropriate oversight, investigation and enforcement powers in respect of the Customer Content; and
(b) issue valid and binding orders to the Service Provider or the relevant Customer or the Customer's end users, in accordance with the laws of the Designated Foreign State, concerning the Customer Content, including orders for providing access, disclosure, preserving or maintaining the integrity of the Customer Content.
3. The competent judicial authorities in the Kingdom (each in their respective capacity according to the laws of the Kingdom) shall, if requested by a competent court or a public authority of a Designated Foreign State following the relevant procedures, support the enforcement of any executable order from such Designated Foreign State that is (i) final and not subject to further appeal subject to the laws and procedures of the issuing authorities, (ii) issued by a court or public authority pursuant to its powers under this Law, and (iii) relates to providing access, disclosure, preserving or maintaining the integrity of Customer Content or any matter in connection with Customer Content, in respect of which the competent judicial authorities have power under the laws of the Kingdom.
4. Subject to Paragraph (1) of this Article, each Service Provider shall continue to be subject to and shall comply with this Law and any other laws of the Kingdom unless otherwise exempted by the Council of Ministers.
5. Nothing in this Article shall prevent a party that is domiciled or incorporated in the Kingdom from receiving any services offered by a Service Provider via a data centre that has been approved as a Virtual Hub.
6. If the act of hosting or processing the Customer Content within the Kingdom constitutes, or any governmental or regulatory authority in the Kingdom reasonably considers that it could constitute, a harmful act against the Kingdom or any other state or a form of interference in the internal affairs of another state, the relevant authority reserves the right to take such action as may be available to it under the laws of the Kingdom or applicable international law.
7. The Service Provider shall cooperate with the Competent Authority in relation to the implementation and monitoring of ongoing compliance with the provisions of this Law.
1. The Council of Ministers or its delegate may order the termination of any Agreement, Bilateral Agreement or other arrangements entered into pursuant to this Law or cancellation of any approval hereunder to protect the Kingdom's safety, national security, and sovereignty, or if the Kingdom ceases to enjoy diplomatic relations with such Guest Country or Designated Foreign State.
2. The Council of Ministers or its delegate shall take into account any mechanisms related to the termination set out in Paragraph (1) of this Article, as provided for in an Agreement, a Bilateral Agreement, or other arrangements. The termination will also be subject to the following:
(a) the privileges granted under this Law shall continue to be applicable in respect of any Private Hub or Extended Hub for the period specified in the relevant Bilateral Agreement with such Guest Country; and
(b) where the designation of any Virtual Hub or the approval of a Designated Foreign State is cancelled under the foregoing, the provisions of this Law shall continue to be applicable in respect of such Virtual Hub for a period of [one hundred and twenty days] following the effective date of the said cancellation or such longer period as may be specified in such notice.
(b) where the designation of any Virtual Hub or the approval of a Designated Foreign State is cancelled under the foregoing, the provisions of this Law shall continue to be applicable in respect of such Virtual Hub for a period of [one hundred and twenty days] following the effective date of the said cancellation or such longer period as may be specified in such notice.
1. Nothing in this Law shall derogate from any additional protection or privileges provided under other laws, international bilateral or multilateral agreements, treaties or conventions in force in the Kingdom.
2. Nothing in this Law should be interpreted to prejudice the Kingdom's safety, national security, diplomatic relations or sovereignty.
1. The relevant government entities, judicial authorities and public bodies shall cooperate with the Competent Authority to facilitate the implementation of this Law.
2. Without prejudice to any Bilateral Agreements entered into with any Guest Country, the Council of Ministers or its delegate may issue within the parameters of this Law any regulations, rules, licenses or any other instrument or enter into any arrangement to facilitate the implementation of this Law.
3. This Law shall supersede any prior law relevant to the subject matter and shall not be amended, replaced or repealed except by express reference to this Law in any subsequent law.
4. This Law shall apply after sixty days from the date of its publication in the Official Gazette.
Last update: 14 April 2025
You can browse the portal by giving voice commands using the microphone
Speak Now...
Please give voice commands from the following options:
Disclaimer: Translation into other languages depends on the Google translation, Therefor the NCC is not responsible for the accuracy of the information in the new language.
