Article 3 of the Saudi Personal Data Protection Law

This article sets a rule for resolving overlap between the Personal Data Protection Law and other laws and agreements: the law represents a minimum level of protection, and is not used to reduce broader protection provided elsewhere.

So if there is:

• A provision in another law that gives the data subject a right, or provides better protection for their data; or
• A provision in an international agreement to which the Kingdom is a party that gives that right or that protection;

then the provisions and procedures of the Personal Data Protection Law do not prejudice that provision, and it remains in place and in force.

The practical effect is that the data subject does not lose a right provided to them in another law on the ground that this law was issued, and that the entities processing data must observe the more protective provisions whenever they exist. The article does not name these laws or agreements, so knowing whether a particular provision gives better protection requires referring to its text.

This rule complements Article 2, which sets the scope of the law's application, and it is connected to the rights Article 4 provides for the data subject; those rights remain in place without reducing any broader right provided by another law. Anyone who needs to know the law best suited to their situation can consult a lawyer specialized in personal data protection and cybercrime.