Introduction
In 2023, India and Saudi Arabia each published new laws and regulations expanding on existing or setting forth new comprehensive data privacy laws. This article summarizes the notable developments in these jurisdictions, specifically focusing on the updated obligations and standards regarding cross-border transfers (i.e., when personal information is transferred from one country to another country). While organizations may already comply with some of these developments by virtue of complying with similarly instituted privacy laws, organizations should take steps to understand fully their obligations to achieve statutory compliance and minimize the risk of legal or financial liability.
