Cookies, Online Tracking and Direct Marketing
Jump to
Cookies, Online Tracking and Direct Marketing Start Comparison
Are there specific requirements for the use of cookies and other online tracking technologies?

Last review date: 31 December 2024

No.

There are currently no published specific laws or regulations that regulate cookies in Saudi Arabia.

Are there specific requirements related to the use of personal data for direct marketing activities?

Last review date: 31 December 2024

Yes.

         email marketing

         prior opt-in consent

         telephone marketing

         prior opt-in consent

         SMS/text message marketing

         prior opt-in consent

         postal marketing

         prior opt-in consent

         online behavioral advertising targeting//social media targeting/ad personalization marketing

         prior opt-in consent

With the exception of informational materials sent by public entities, the controller may not use personal means of communication, including the postal and email addresses of the individual, to send advertising or informational materials, except in accordance with the following:

  • The controller must obtain the consent of the recipient.
  • The sender of the material provides a clear mechanism that enables the intended recipient to express their desire to stop receiving such materials. This mechanism should be easy, straightforward and at least as easy as the procedures for giving consent to receive them.

The Implementing Regulations also clarify that, when sending marketing materials, the identity of the sending entity shall be clearly stated without any anonymization.

Personal data (with the exclusion of sensitive data) may be processed for marketing purposes if the collection is undertaken from the individual directly and in accordance with the provisions of the PDPL.