Saudi Arabia’s New Data Monetization Policy: What Private Entities Need to Know

time 3 min 15 sec June 23, 2026 (Edited)
Written by
Valeria Dessolis

Senior Legal Technology Advisor

V.Dessolis@tamimi.com

On 20 June 2026 the Saudi Data and Artificial Intelligence Authority (SDAIA) has approved a new Data Monetization Policy designed to organize Saudi Arabia’s emerging data market and maximize the economic value of government-produced data. The policy supports the growth of the data market and contributes to building a data-driven economy, recognizing data as an essential asset for achieving economic value. Aligned with Vision 2030, the policy treats data as a strategic national asset and establishes a regulatory framework governing how government data may be accessed, licensed, and commercialized—including by private-sector entities. For businesses operating in or entering the Saudi market, the policy introduces both significant opportunities and new compliance obligations.

Policy Overview

The policy applies to government data used in developing, providing, or utilizing data products and services, including data accessed by private-sector entities performing tasks on behalf of government agencies. Data classified as “Secret” level or above is excluded from the framework’s scope. Seven core principles underpin the policy: recognizing data as a national asset, generating revenue, privacy by design, promoting open data, fostering a culture of data sharing, preventing monopolistic practices, and ensuring transparency.

Notably, data monetization is defined as a systematic process aimed at creating measurable economic value, achieved through the development of data products and services based on possible use cases, in a manner consistent with regulatory provisions and national objectives. It extends beyond direct financial returns to encompass improved public-service efficiency, reduced operational costs, enhanced innovation capacity, and accelerated technological development. Data monetization is limited to data products and services; it does not include revenue realization from data in its raw form. Data licensed to private entities may only be used for the purposes specified in the relevant Data-Sharing Agreements and may not be shared with other parties, whether for a fee or free of charge.

Implications for Private Entities

The policy establishes several key requirements and entitlements for private-sector participants:

Fair and non-discriminatory access. Government data must be made available to private entities on fair and non-discriminatory terms, with safeguards against monopolistic behavior and unfair competitive advantages.

Licensing requirements. Beneficiaries must obtain usage licenses and comply with their terms. Licensed entities may develop and monetize products based on government data—including open data—but are prohibited from re-sharing or transferring datasets beyond approved use cases.

Revenue-sharing and registry obligations. The National Data Management Office (The Office) under SDAIA will establish a national register for data monetization, and all providers of data products and services within the scope of the policy must register their products or services through it. Where two or more government entities have agreed to develop or use data products and services from multiple sources, the provider of data products and services must additionally document in the national register the identity of the data issuers and the revenue-sharing model showing each participating entity’s share.

Extended scope. The policy covers not only government-managed data but also data acquired by private entities in the course of developing, providing, or utilizing data products and services, broadening the compliance footprint considerably.

Market Enablers

To support implementation, the framework establishes registration mechanisms, regulatory sandboxes, data licensing frameworks, market-enabling platforms, and guidance on data monetization models. The Office will provide a regulatory sandbox to support entities in assessing the value of data, identifying priority use cases, and determining appropriate models for data monetization — enabling entities to complete the procedures required for engaging with government data commercialization.

Key Takeaway

For private entities, this policy creates a structured pathway to access and commercialize government data while imposing compliance obligations around licensing, anti-monopoly rules, privacy (consistent with Saudi Arabia’s Personal Data Protection Law), and revenue-sharing transparency. Companies should assess their data supply chains for government-sourced inputs and prepare for registration and licensing requirements as implementing regulations are rolled out. Early engagement with the regulatory sandbox and forthcoming guidance will be critical for organizations seeking to capitalize on the Kingdom’s data economy.

Written by
Valeria Dessolis

Senior Legal Technology Advisor

V.Dessolis@tamimi.com