No. Doxxing violates Saudi Arabia’s cybercrime and privacy laws, with penalties including imprisonment and fines under the Anti-Cyber Crime Law and Personal Data Protection Law. The Communications and Information Technology Commission (CITC) and National Data Management Office (NDMO) enforce strict compliance, particularly with 2026’s enhanced data protection mandates.
Key Regulations for Doxxing in Saudi Arabia
- Anti-Cyber Crime Law (Royal Decree M/17, 2007, amended 2023): Criminalizes unauthorized disclosure of personal data, including online publication of private information, with penalties up to 1 million SAR and 4 years imprisonment (Article 3).
- Personal Data Protection Law (PDPL, 2023): Prohibits processing personal data without consent, mandating strict data minimization and security controls. Violations may trigger fines up to 5 million SAR (NDMO oversight).
- Electronic Transactions Law (2006): Classifies doxxing as a form of electronic harassment, enabling civil claims for damages alongside criminal prosecution.
Enforcement prioritizes cases involving national security, public order, or defamation, with joint investigations by CITC, NDMO, and the Public Prosecution Service. Foreign entities operating in Saudi Arabia must align with PDPL’s extraterritorial provisions, risking license revocation for non-compliance.