Saudi Arabia's Personal Data Protection Law; administered by SDAIA; in force with extraterritorial reach; data-residency and transfer conditions apply.