Advancements in technology and digital networks have transformed global trade and data exchange methods. Data protection and privacy have become increasingly important concerns. To remain relevant in the digital global economy, countries, and industries must adapt accordingly. The European Union (EU) adopted the General Data Protection Regulation (GDPR) in April 2016 and began compliance enforcement on May 25, 2018. All organizations that handle personal information of EU residents, regardless of whether they are located within the EU, are required to comply with the GDPR. Non-compliance has already resulted in considerable fines. Because compliance with the GDPR requires additional investment, the regulation may act as a trade barrier. Moreover, the timing of the GDPR is crucial for Persian Gulf countries, like Saudi Arabia, who are in the middle of diversifying their economies by expanding the non-oil services sectors. While the Saudi government has passed several regulations to monitor electronic transactions, an updated national data protection framework does not exist. Through exploratory case studies of four Saudi companies in tourism and logistics sectors, this research explored the impact of compliance to GDPR on Saudi companies. Examining legal, technical, and financial perspectives of participants from these companies, the study found that challenges faced by companies with GDPR compliance in Saudi Arabia mirror those previously reported for European or US companies. While the challenges appear to be similar, any future data security and protection development must find consider Saudi regulations, norms, and culture. These companies and the Saudi government invest in the infrastructure necessary for GDPR compliance to avoid the possible costs of non-compliance.
موضوع (اسم عام یاعبارت اسمی عام)
موضوع مستند نشده
Information technology
موضوع مستند نشده
International law
موضوع مستند نشده
Middle Eastern studies
نام شخص به منزله سر شناسه - (مسئولیت معنوی درجه اول )