The Saudi Data and Artificial Intelligence Authority (SDAIA) has issued the General Rules for the Secondary Use of Data as part of national efforts to regulate data sharing and enhance data utilization across government and private entities.
The rules for the Secondary use of Data establish controls and procedures for requests to share data for purposes that serve the public interest or support research, development, and innovation.
SDAIA said that the framework aims to encourage government entities to share data, improve operational efficiency, support decision-making, and enable the implementation of national strategies by facilitating access to data for secondary use.
The rules aim to maximize the value of data held by both government and private entities, enabling controlled data sharing beyond its original collection purpose while ensuring transparency and accountability. The document builds on the existing Data Sharing Policy, providing clear procedures and principles to support responsible secondary use across sectors.
What is secondary use of data?
Under the rules, ‘secondary use of data‘ is defined as any processing of information for research, development, innovation, or public-interest operations that differs from the initial collection intent. Entities seeking access must submit formal requests, whether between government bodies, from private to public entities, or vice versa.
Key principles for the secondary use of data include protecting privacy and personal data, adherence to national cybersecurity standards, maintaining data quality, ethical use, and prioritizing public interest. Data sharing must be proportionate, relevant, and limited to the stated purpose, explicitly excluding purely profit-driven activities.
The framework also outlines procedural safeguards: applicants must provide detailed justifications and, where necessary, obtain licenses or approvals. Requests for research purposes must be supported by institutional or academic endorsements. Data-sharing entities may include terms on intellectual property and confidentiality within agreements.
SDAIA said the rules for secondary use of data are expected to provide a structured and secure environment for data reuse, fostering innovation, supporting decision-making across public services, and strengthening Saudi Arabia’s national data ecosystem in alignment with the Kingdom’s digital transformation and economic diversification strategies.
