This policy is established to support the growth of the data market and contribute to building a datadriven economy, recognizing data as an essential asset for achieving economic value. This is achieved through the developmentand provision of productsand services based on thecollection, processing,and optimal reuse of data by othergovernmentand private entities. Accordingly,converting datainto valueadded productsand servicesthatare offered forafeeenablesentitiesand individualsto realizeeconomic value from data. Moreover, the provision and development of data products and services are inherently subject to regulatory frameworksthatcollectively constitutethe dataregulatory environment, to achieve a balance between maximizing the use of data as a valuable asset and strategic resource, preserving national sovereignty over data, protecting individuals’ rights regarding the processing of their personal data, and sharing key data among government entities to achieve integration, enable access to public information to enhancetransparency,and disseminate open datato support research, development,and innovation.

1. Data: A collection of facts in their raw or unstructured form, such as numbers, letters, static images, video, audio recordings, or emojis.

2. Data Processing: Any operation performed on data by any means, whether manual or automated.

3. Data Products: A set of data processing activities that are collected and designed as products to achieve specific purposes, ensuring that these products may be reused by targeted beneficiary groups.

4. Data Services: Services that provide continuous value, whether current or available on demand by accessing, processing, or leveraging data to support decision-making.

5. Data Monetization: A systematic process aimed at creating measurable economic value, which can be achieved through the development of data products and services based on possible use cases, in a manner that does not conflict with relevant regulatory provisions and requirement, and in line with national objectives. 6. Monetization Models: Different methods and models can be adopted by entities to study the economic value of data products and services, in line with possible use cases.

7. Pricing Models: Methodologies that include a set of factors, steps, and procedures that can be followed to determine the economic value of data products and services.

8. Classified Data: Data classified at one of the following levels(Top Secret, Secret, Restricted, or Public) pursuant to the Data Classification Policy.

9. Open Data: A specific set of data classified at the “Public” level, provided in a machine-readable format, and made available to the public free of charge and without restrictions, which may be used or shared by any individual, public entity, or private entity, pursuant to the Open Data Policy.

10. Government Entity: Any ministry, government entity, body, authority, public institution, fund, or center, and any independent entity with public legal personality.

11. Private Entity: Any private legal person licensed to operate in the Kingdom of Saudi Arabia.

12. Government Services: Services provided by government entities in the course of exercising their competencies and powers or in the performance of their assigned tasks, which may be delivered through a private entity on behalf of the government entity.

13. Data Products and Services Provider: Any government or private entity that provides data products or services fora fee, whether directly or indirectly.

14. Beneficiary of Data Products and Services: Any individual, government entity, or private entity that benefits from data products or services for a fee.

15. The Office: National Data Management Office.

1. This Policy shall apply to government data when developing, providing, or using data products and services. This includes data obtained by private entities in the course of performing tasks on behalf of government entities, or data that has been initially obtained from a government entity by any means and for any purpose.

2. Data classified by government entities at the “Secret” level or higher shall be excluded from the scope of this Policy.

This Policy Aims to:

• 1. Regulate the main aspects of the data market in the Kingdom of Saudi Arabia by establishing basic principles and general rules that govern the development and provision of products and services based on data generated by government entities, in a manner that contributes to realizing economic value from it and ensuring its optimal use across various sectors, as a fundamental pillar for the growth of the data market in the Kingdom of Saudi Arabia.

• 2. Develop enablers that contribute to stimulating the data market, including registration and provision of the regulatory sandbox, data use licenses, enabling platforms for the data market, and guidelines related to identifying monetization models appropriate for priority use cases.

Data generated by government entities shall be deemed national assets that such entities must manage in a manner that serves the public interest and ensures their preservation as national assets, such data may not be used by any other party except pursuant to a Data Sharing Agreement if the other party is a non-government entity, or in accordance with the Data Sharing Controls if the other party is a government entity, as provided under the Data Sharing Policy. With respect to data products and services, any government entity shall be entitled to develop products and services based on the Data and to retain the developed intellectual property rights, pursuant to applicable laws and regulations.

Data is a valuable asset that can be developed and maximized through the development and delivery of data products and services and their optimal use, contributing to development and innovation, and achieving economic and social returns from data as a strategic resource, in addition to its role in reducing operational burdens and improving the quality of public services.

Ensure individuals' privacy when developing and using data products and services that process personal data, by complying with the provisions and procedures outlined in the Personal Data Protection Law, its Implementing Regulations, and the documents issued pursuant thereto.

Open data is a key resource for supporting researchers and entrepreneurs. To maximize data utilization through the development and use of data products and services, monetization models must not conflict with the Open Data Policy or with government entities' efforts to enhance their contributions toward achieving national objectives.

Data sharing enables access to primary data sources, thereby improving data quality and delivering public services. To maximize data utilization through the development and use of data products and services, monetization models must not conflict with the Data Sharing Policy or the efforts undertaken to achieve integration between government entities.