Saudi Arabia
Freedom of Information Regulation
Freedom of Information Regulation, issued under National Data Management and Personal Data Protection Standards by the National Data Management Office (NDMO), Saudi Data and Artificial Intelligence Authority (SDAIA)
RTI Rating: 53 (source)
Response Timeline
30 calendar days from receipt of request. May be extended for a reasonable period depending on size and nature of information requested (e.g., additional 30 days). Rejection notifications must be sent within 15 days of decision.
How to Submit a Request
Accepted Methods
Requests must use entity-approved "Public Information Request Form" (varies by agency). Must specify how entity should send final decision (national address, email, or website). Should verify information is not already publicly available via Open Data Platform or entity publications.
Required Elements
- Completed Public Information Request Form (entity-specific template)
- Identification of specific information or documents required
- Preferred method for receiving decision (national address, email, or website)
Fees
Filing requests is free. Fees for processing, reproduction, and delivery are determined by each public entity based on the nature and size of data, processing effort, and time required, following the Data Revenue Framework Interim Regulation. No specific amounts are mandated centrally. No free pages threshold specified.
Exemptions
-
National SecurityInformation that, if disclosed, could harm the national security, policies, interests, or rights of the Kingdom of Saudi Arabia
-
Military and Security InformationMilitary and security-related records
-
International RelationsDocuments obtained from other states under international agreements and classified as protected
-
Law EnforcementInvestigations, seizures, inspections, and monitoring operations related to a crime, violation, or threat
-
Pre-Decision DeliberationsRecommendations, suggestions, or consultations for the issuance of government legislation or decisions not yet issued
-
Commercial ConfidentialityCommercial, industrial, financial, or economic information where disclosure could be used to illicitly gain profits or prevent costs
-
Intellectual PropertyScientific or technological research or intellectual property rights
-
Competitive ProcurementTender and bidding information that could violate fair competition
-
Other Legal ProtectionsInformation that is confidential or private under another law or requires specific legal procedures
The regulations list nine categories of protected information. All exemptions appear discretionary rather than mandatory—agencies must 'clearly and explicitly justify' limitations under the Necessity and Proportionality principle. However, a harm test is only required for some exceptions; military/security information and ongoing investigations are excluded from harm testing. Notably, there is NO public interest override provision allowing disclosure when public benefit outweighs the protected interest. The RTI Rating notes that some exemptions are overly broad (e.g., 'national interests' and 'scientific research'). All other secrecy laws take precedence over the FOI regulations. RTI Rating scored Saudi Arabia 9/30 points on Exceptions & Refusals section (30%), indicating significant weaknesses in exemption framework compared to international best practices.
Appeal Process
1
Severely weak appeals system (RTI Rating: 4/30). No independent administrative oversight body; appeals go directly to judicial system via Board of Grievances. No internal appeal mechanism. No specified timelines for appeal resolution. Limited to appealing denials only.