Compliance with Saudi Arabia’s PDPL for 5G network: Legal data protection and technical network performance
This study investigates compliance with Saudi Arabia’s Personal Data Protection Law (PDPL) for fifth generation (5G) networks, focusing on legal data protection requirements and technical network performance. The PDPL mandates robust security, consent, and timely data access for personal data processing, critical for 5G networks handling sensitive information. Using user equipment applications, this study evaluates 5G network performance through latency tests (targeting round-trip times below 50 ms) and security assessments (verifying Transport Layer Security encryption and Extensible Authentication Protocol Authentication and Key Agreement). Results demonstrate that Saudi Telecom Company’s 5G network in Saudi Arabia can achieve PDPL compliance by balancing low latency for data availability with strong encryption for confidentiality and integrity, aligning with Communications, Space & Technology Commission regulations. This is the first empirical evaluation of PDPL compliance for Saudi’s 5G networks combining network performance and legal frameworks.
- Saudi Data and Artificial Intelligence Authority. Personal Data Protection Law. Saudi Data and Artificial Intelligence Authority; 2021. Accessed February 28, 2026. Available at: https://sdaia.gov.sa/en/SDAIA/about/Pages/aspx
- Saudi Data and Artificial Intelligence Authority. Implementing Regulations of the Personal Data Protection Law. Saudi Data and Artificial Intelligence Authority; 2023. Accessed September 3, 2025. Available at: https://sdaia.gov.sa/en/SDAIA/about/ Documents/ImplementingRegulation.pdf
- PwC Middle East. Guide to the Saudi Personal Data Protection Law. PwC Middle East; 2023. Accessed February 28, 2026. Available at: https://www.pwc.com/m1/en/blogs/pdf/ksa-personal-data-protectionlaw-series-part-1.pdf
- Sarabdeen J, Ishak MM. Compliance of Saudi Arabian Personal Data Protection Law 2021 to Islamic principles of privacy. Migration Lett. 2024;21(4):726-737.
- National Data Management Office. Data Management and Personal Data Protection Standards, Version 1.5. Saudi Data and Artificial Intelligence Authority; 2021. Accessed February 28, 2026. Available at: https://sdaia.gov.sa/ndmo/Files/PoliciesEn001.pdf
- Saudi Data and Artificial Intelligence Authority. Elaboration and Developing Privacy Policy Guideline, Version 1.0. Saudi National Data Governance Platform; 2024. Accessed February 28, 2026. Available at: https://dgp.sdaia.gov.sa/wps/wcm/connect/ 3125da48-43dd-46bc-9156- 1f7b91ab8f54/Elaboration+and+Developing+Privacy+Policy+Guideline.pdf?MOD=AJPERES
- Maganti MR, Rao KR. Enhancing 5G Core Network Performance through Optimal Network Fragmentation and Resource Allocation. Eng Technol Appl Sci Res. 2024;14(3):14588-14593. https://www.doi.org/10.48084/etasr.7235
- Yuan Q, Liu Z, Jiang X, Hu H, Yang Y, Li J. Allocation of computing resources based on multi-objective strategy and performance improvement in 5G networks. Computer Communications. 2025;238:108197. https://www.doi.org/10.1016/j.comcom.2025.10819
- Pazienza A, Bozzolo L, Mancuso D, Rossi M, Aloi G, Gravina R. Optimizing 5G Networks for Low-Latency Communication: A Reinforcement Learning-Based Approach. Procedia Computer Science. 2025;253:1780-1789. https://www.doi.org/10.1016/j.procs.2025.01.240
- Kumar A, Singh P, Kamble DP, Singh I. Hybrid cryptographic approach for strengthening IoT and 5G/B5G network security. Sci Rep. 2025;15(1). https://www.doi.org/10.1038/s41598-025-21861- 2
- Alkhamsi NN, Alqahtani Compliance Framework for Personal Data Protection Law Standards. IJACSA. 2024;15(7). https://www.doi.org/10.14569/ijacsa.2024.0150751
- Alsamara T, Farouk G. Artificial Intelligence and Legal Transparency: A Comparative Analysis be- tween Public and Private Law. JoPH. 2025;5(1). https://www.doi.org/10.63332/joph.v5i1.685
- Ko Y, Pawana IWAJ, Won T, Astillo PV, You I. Toward an Era of Secure 5G Convergence Applications: Formal Security Verification of 3GPP AKMA with TLS 1.3 PSK Option. Applied Sci- ences. 2024;14(23):11152. https://www.doi.org/10.3390/app142311152
- Al-Khalifa H, Mashaabi M, Al-Yahya G, Alnashwan R. The Saudi Privacy Policy Dataset. arXiv. 2023. https://www.doi.org/10.48550/ARXIV.2304.02757
- Madkhali AM, Bouri HA, Alotaibi FOE, et al. Potential Health Implications of Fifth Generation (5G) Wireless Communication Technology. Saudi J Med Public Health. 2024;1(1):94-105. https://www.doi.org/10.64483/20251125
- Communications, Space and Technology Com- mission. Telecommunications and Information Technology Bylaw. Communications, Space and Technology Commission; 2025. Accessed Septem- ber 3, 2025. Available at: https://www.cst.gov.sa/en/regulations
- Alhazmi A, Daghistani A. Privacy practices of popular websites in Saudi Arabia. J Umm Al-Qura Univ EngArchit. 2024;16(1):19-29. https://www.doi.org/10.1007/s43995-024-00085- x
- Alkhamsi, N. N., & Alqahtani, S. S. Data privacy governance in data management ecosystems: a compliance framework for PDPL standards. In: Abd El-Latif AA, El Affendi MA, AlShara MA, Maleh Y, eds. Cybersecurity, Cybercrimes, and Smart Emerging Technologies. CRC Press; 2025:213-226. https://www.doi.org/10.1201/9781003614197
- Sabur A, Showail AJ. Nudging Data Privacy of Mobile Health Applications in Saudi Arabia. International Journal of Information Security and Privacy. 2024;18(1):1-19. https://www.doi.org/10.4018/ijisp.345647
- Madhusudhanan S, Jose AC. Privacy preservation techniques through data lifecycle: A comprehensive literature survey. Computers Security. 2025;155:104473. https://www.doi.org/10.1016/j.cose.2025.104473
- Oluchukwu M, Oluoha, Odeshina A, et al. A Privacy-First Framework for Data Protection and Compliance Assurance in Digital Ecosystems. IRE Journals. 2023;7(4).
- Alnashwan R, Gope P, Dowling B. Privacy-Aware Secure Region-Based Handover for Small Cell Networks in 5G-Enabled Mobile Communication. IEEE TransInformForensic Secur. 2023;18:1898- 1913. https://www.doi.org/10.1109/tifs.2023.3256703
- Ain N, Waqar M, Bilal A, et al. A Novel Approach Based on Quantum Key Distribution Using BB84 and E91 Protocol for Resilient Encryption and Eavesdropper Detection. IEEE Access. 2025;13:32819-32833. https://www.doi.org/10.1109/access.2025.3539178
- Sajid M, Malik KR, Khan AH, Bilal A, Alqazzaz A, Darem AA. Advanced multilayer security framework: integrating AES and LSB for enhanced data J Supercomput. 2025;81(17). https://www.doi.org/10.1007/s11227-025-08093- x
- European Union Agency for Cybersecurity (ENISA). GDPR-Compliant 5G Security. European Union Agency for Cybersecurity; 2022. Accessed: Feb. 28, 2026. Available at: https://www.enisa.europa.eu/publications/ handbook-on-security-of-personal-data- processing
- Abdullah Alsadhan A. A Survey of Security Threats and Challenges Related To 5G Networks in Saudi Arabia. QAJ. 2025;5(3):474-501. https://www.doi.org/10.48161/qaj.v5n3a1849
- Bartock M. 5G Network Security Design Principles: Design Principles: National Institute of Standards and Technology; 2025. https://www.doi.org/10.6028/nist.cswp.36e.ipd
- Wang Y, Wang R, Liu X, et al. A Framework for TLS Implementation Vulnerability Testing in 5G. In: Lecture Notes in Computer Science. Springer Nature Switzerland; 2023:284-298. https://www.doi.org/10.1007/978-3-031-41181-6 16
- Elevating 5G with Differentiated Connectivity: Saudi Arabia. Ericsson ConsumerLab Report; 2025. Accessed: Jun. 2, 2026.
- Lastre JK, Ko Y, Kwon H, You I. Evaluating Transport Layer Security 1.3 Optimization Strategies for 5G Cross-Border Roaming: A Com- prehensive Security and Performance Analysis. Sensors. 2025;25(19):6144. https://www.doi.org/10.3390/s25196144
- nPerf Speed Test 4G 5G WiFi & Maps. Mobile application. nPerf; 2025. Accessed: Feb. 28, 2026. Available at: https://play.google.com/store/apps/ details?id=com.nperf.tester
- PCAPdroid - Network Monitor. Mobile application. Emanuele Faranda; 2025. Ac- cessed: Feb. 28, 2026. Available at: https://play.google.com/store/apps/details? id=com.emanuelef.remote capture.
- NetMonster. Mobile application. Michal Mroˇcek; 2025. Accessed: Feb. 28, 2026. Available at: https://play.google.com/store/apps/ details?id=cz.mroczis.netmonster
- Olomina J. AI-driven compliance monitoring frameworks for automated detection and classification of data privacy violations in hybrid infrastructures. Int J Sci Res Arch. 2025;16(3):202-208. https://www.doi.org/10.30574/ijsra.2025.16.3.2541
- Pavani GK, Veeramallu B. Hybrid Machine Learning Framework for Anomaly Detection in 5G Networks. JISEM. 2025;10(32s):733-739. https://www.doi.org/10.52783/jisem.v10i32s.5406
- Samara EA, Akamine C. Identifying Key Parameters Affecting Energy Efficiency in 5G Net- works Using Machine Learning. In: 2025 Interdisciplinary Conference on Electrics and Computer (INTCEC). IEEE; 2025:1-5. https://www.doi.org/10.1109/intcec65580. 2025.11256175
- World Economic Forum. How Privacy Enhancing Technologies Impact Business, Individuals, and Society. World Economic Forum; 2023. Accessed: Jun. 2, 2026. Available at: https://www.weforum.org/stories/2023/10/the- impact-ofprivacy-enhancing-technologies-pet-on- business-individuals-and-society
- Usman HM, Imran A, Bilal A, Garayev M, Fathi H, Dhelim S. Resource-Limited Skew Estimation and Correction (RLSEC) for Edge Devices in Delay Non-Tolerant Networks. IEEE Access. 2024;12:159597-159610. https://www.doi.org/10.1109/access.2024.3469581
