Industrial Policy & Trade Monitor· 2667 actions· ✨ 89 recent

On 31 December 2025, Saudi Arabia's Ministry of Human Resources and Social Development (MHRSD) issued Decision No. 93483 raising the mandatory Saudization (localization) quota for engineering professions in the private and non-profit sectors from 25% to 30%, alongside a minimum-wage floor increase from SAR 7,000 to SAR 8,000 for qualifying Saudi hires. The decision covers 46 designated engineering professions (architect, power generation engineer, industrial engineer, electronics engineer, vehicle engineer, marine engineer, health engineer, and others) at establishments employing five or more workers in those roles, and requires professional accreditation from the Saudi Council of Engineers. Implementation began six months after issuance, on 30 June 2026, to give employers a compliance runway.

On 11 August 2024, King Salman issued Royal Decree No. M/19 promulgating Saudi Arabia's new Investment Law (Nizam al-Istithmar), which entered into force on 12 February 2025 (180 days after publication in the Um Al-Qura' Gazette). The law replaces the 2000 Foreign Investment Law (Royal Decree M/1) and eliminates the statutory distinction between Saudi and non-Saudi investors, establishing a unified national-treatment framework: foreign investors no longer require a separate MISA foreign-investment licence and instead complete a streamlined registration with a national registry before commencing activity (other than listed securities, which remain under CMA rules). The law codifies fair-and-equitable treatment, freedom to manage and repatriate capital, IP protection, and protection from expropriation except by final judicial ruling with prompt compensation; activities are open by default, subject only to an "Excluded Activities" list maintained by an inter-ministerial committee. Implementing Regulations were issued by Ministerial Resolution No. 1086 dated 8/8/1446H (7 February 2025) and published in Um Al-Qura' Gazette issue 5083 on 25 April 2025. The law is the foundational FDI architecture for Vision 2030 and pairs with the 30-year RHQ tax-incentive package and the 2021 Mining Investment Law.

Saudi Arabia's Personal Data Protection Law (PDPL), issued under Royal Decree M/19 (16 September 2021) and substantively amended by Royal Decree M/148 (27 March 2023), entered into force on 14 September 2023 with a one-year transition period that ended on 14 September 2024 — at which point the Saudi Data & Artificial Intelligence Authority (SDAIA) became the binding regulator with full enforcement powers. Alongside the Implementing Regulations and the Regulations on the Transfer of Personal Data Outside the Kingdom (both issued 7 September 2023), SDAIA published in 2024 a set of four pre-approved Standard Contractual Clauses templates (C2C, C2P, P2P, P2C) governing cross-border transfers. The regime establishes consent requirements, DPO appointment, a 72-hour breach notification duty, and prior-clearance / SCC-or-BCR-style conditions on personal-data exports out of Saudi Arabia.