Website legal requirements Saudi Arabia businesses should know

Saudi Arabia's Personal Data Protection Law took effect on 14 September 2023 and became fully enforceable by the Saudi Data & Artificial Intelligence Authority (SDAIA) after a grace period that ended on 14 September 2024. Review how your forms collect personal data when planning your site or app.

Under the Saudi E-Commerce Law, a consumer may rescind a contract within seven days of receiving the product or concluding the service contract, provided the product or service has not been used. Exceptions include customised products. Account for this when planning your store's cancellation information and process.

Phase 1 (Generation Phase) of ZATCA's e-invoicing has applied since 4 December 2021 to all resident taxpayers. They must generate and store tax invoices and notes through compliant electronic solutions. Plan how your checkout and invoicing solution will handle these records.

Saudi VAT Implementing Regulations require tax invoice details to be shown in Arabic. Any other language on the invoice is a translation. Plan space for Arabic invoice details in your invoicing system.

Yes. mada cards can be used for online payments at e-commerce outlets through the 3D Secure protocol. mada is a national payment system owned by the Saudi Central Bank (SAMA). Consider this when selecting payment options for your checkout.

Article 1 of Saudi Arabia's Basic Law of Governance states that the Kingdom's language is Arabic. Consider Arabic text when planning your pages and forms.

The Saudi Network Information Center (SaudiNIC) administers the .sa and Arabic .السعودية domains. The Communications, Space & Technology Commission (CST) operates SaudiNIC. Consider these domain options when planning your site's address.

Saudi Arabia's E-Commerce Law (Royal Decree No. M/126 of 2019) applies to service providers in the Kingdom and to practitioners abroad who offer products or services to consumers in the Kingdom. An online store must disclose the seller's name or identifying details, address, contact information and commercial registration name and number, if any. Make room for these details on your store.

Phase 2 of Saudi e-invoicing requires taxpayers' e-invoicing solutions to integrate with ZATCA's Fatoora platform and is being extended in further waves. Use these steps to plan your site or app.

• Review how your forms collect personal data.
• Show the required seller and contact details on your store.
• Plan cancellation information and a process for customer requests.
• Plan how to generate and store invoices through a compliant electronic solution.
• Include Arabic tax invoice details in your invoicing system.
• Check which e-invoicing integration wave applies to you.
• Consider mada when selecting checkout payment options.
• Consider Arabic text and Saudi national domains for your site.