Article 1 of the Saudi Anti-Cybercrime Law

This article is the dictionary of the law; each of the ten terms in it is understood in the meaning specified here wherever it appears in the law, unless the context requires another meaning. Understanding these definitions is necessary to know when an act falls under the law.

The main points the article sets out:

• Person: includes an individual (a natural person) and an entity (a legal person), public or private, so the law is not limited to individuals.
• Computer: a broad definition covering any electronic device, fixed or mobile, wired or wireless, that processes, stores, sends, receives, or browses data. Any device with these characteristics falls within this description.
• Data: information, commands, messages, sounds, and images, and anything that can be stored, processed, transferred, or created by the computer.
• Information network: a link between more than one computer or information system to exchange data, including private and public networks and the Internet.
• Unauthorized access: a person deliberately accessing a computer, website, system, or network that they are not authorized to access; intent and absence of authorization must both be present.
• Cybercrime: any act that involves using the computer or the information network in violation of the provisions of this law.
• Interception: viewing data or obtaining it without a valid legal justification.

The article also defines information system, computer programs, and website. These definitions serve the objectives of the law set out in Article 2, such as achieving information security and protecting the public interest and the national economy. Anyone who needs to know whether a particular definition applies to a specific incident would do best to consult a lawyer specializing in cybercrime.