Online safety & content laws in Saudi Arabia (2026)
Online safety rules in Saudi Arabia: heavy restriction.
Saudi Arabia heavily restricts the internet through one of the world's most extensive state filtering systems run by the CST, blocking content across 90+ categories, while vaguely worded cybercrime and counterterrorism laws are used to prosecute online speech (Freedom House rated it 'Not Free', 25/100, in Freedom on the Net 2025). On top of censorship, the kingdom layers comprehensive licensing/registration controls: digital content platforms must register with the CST and content creators/influencers must hold GAMR 'Mawthooq' permits. The overall posture is one of heavy government control rather than a rights-protective online-safety regime.
Legal framework
Communications, Space & Technology Commission (CST, ex-CITC) operates extensive state filtering; Anti-Cyber Crime Law (Royal Decree M/17, 2007); CST Regulations for Providing Digital Content Platform Services (2024); GAMR media/content-creator licensing under the Audiovisual Media Law (Royal Decree M/33, 2017)
Key points: internet & online safety in Saudi Arabia
Extensive state filtering & censorship
The CST maintains nationwide filtering infrastructure blocking content across more than 90 categories, including political dissent, human rights groups, and LGBT+ material; Freedom House classifies the country 'Not Free' (25/100) in Freedom on the Net 2025.
Anti-Cyber Crime Law criminalizes online content
Royal Decree M/17 (2007) criminalizes producing or transmitting content harming public order, religious values or public morals, with penalties up to five years' imprisonment and fines up to SAR 3 million; it is routinely used to prosecute peaceful online expression with lengthy sentences.
Digital content platform registration (CST)
Under the CST's Regulations for Providing Digital Content Platform Services (compliance deadline 8 Oct 2024), local and international platforms, social media, video-sharing, e-sports, OTT, online gaming, must register/license; social/video/e-sports platforms with 100,000+ users must register and appoint a local liaison officer.
Content-creator / influencer licensing (GAMR 'Mawthooq')
The General Authority for Media Regulation requires anyone earning revenue from advertising/promotional content on social media to hold a 'Mawthooq' permit (≈SAR 15,000 for three years); operating without a license can draw fines up to SAR 5 million.
Audiovisual / OTT content licensing
The Audiovisual Media Law (Royal Decree M/33, 2017) requires all audiovisual media services, including OTT, VOD, IPTV and streaming, to be licensed by GAMR, with strict content-moderation standards (modesty, religious and national-image rules) and 90-day content-retention obligations.
Surveillance, prosecution and VPN blocking
Authorities monitor social media, pressure users to delete posts, and impose multi-decade sentences for online expression; VPN use is not explicitly illegal but Tor and major VPN provider sites are blocked, and roughly 30% of users rely on VPNs to evade filtering.
Timeline of decisions
- Law · officialGAMR Proposes Sweeping Media Law Requiring Licences for Social Media
The General Authority of Media Regulation circulated a draft Media Law mandating that all digital platforms and individual content creators obtain a government licence before publishing any media content. Critics warned it would extend the Kingdom's press censorship regime to ordinary social media users; as of mid-2025 the law remained under review.
General Authority of Media Regulation (GAMR)
- EnforcementSalma al-Shehab Sentenced to 34 Years for Tweets
Saudi Arabia's Specialized Criminal Court upgraded a doctoral student's sentence to 34 years (later reduced to 27 years on appeal in January 2023) solely for retweeting dissidents and activists. The case became a global flashpoint illustrating how the Anti-Cybercrime Law and Anti-Terrorism Law are routinely used to criminalise online expression.
Human Rights Watch
- Law · officialNew Telecommunications and Information Technology Act (Royal Decree M/106)
Royal Decree M/106 replaced the 2001 Telecom Law, broadening the regulatory mandate from voice/data communications to the full ICT sector, internet services, digital platforms, and data transmission. The regulator was renamed the Communications, Space and Technology Commission (CST); the Act and its Bylaws entered into force on 7 December 2022.
Communications, Space & Technology Commission (CST)
- Decision · officialLong-Standing VoIP Ban Lifted
Saudi Arabia rescinded its multi-year ban on VoIP applications (WhatsApp, Skype, FaceTime, Viber), allowing platforms that met CITC regulatory requirements, including cooperation with lawful interception, to operate. The decision was driven by Vision 2030 digital-economy objectives and ended a regime that had forced users to rely on standard mobile calls.
Communications, Space & Technology Commission (CST, formerly CITC)
- Law · officialAnti-Cyber Crime Law Enacted (Royal Decree M/17)
Saudi Arabia's foundational cybercrime statute criminalised unauthorised system access, interception of data, online fraud, and content deemed contrary to public order, religious values, or general morals, with penalties up to one year imprisonment and SAR 5 million in fines. The law became the primary legal instrument subsequently used to prosecute online expression and dissent.
WIPO Lex (official Saudi text)
- DecisionCITC Assumes Central Control of National Internet Filtering
The Communications and Information Technology Commission took over DNS administration and content filtering from KACST's Internet Services Unit, centralising all Saudi internet traffic through a government-managed filtering system. Content is blocked across 90+ categories including pornography, gambling, LGBTQ+ content, and material deemed politically or religiously subversive.
OpenNet Initiative
- DecisionPublic Internet Launched Under Centralised Filtered Architecture
Saudi Arabia became one of the last Gulf states to open public internet access, arriving years late because the government spent 1997-1999 building a centralised infrastructure that routes all traffic through government-managed servers before delivery to ISPs. The King Abdulaziz City for Science and Technology (KACST) Internet Services Unit administered all filtering; this hub-and-spoke architecture underpins today's regulatory model.
OpenNet Initiative
Sources
- freedomhouse.org/country/saudi-arabia/freedom-net/2025
- cst.gov.sa/en/media-center/news/CST-Announces-The-Deadline-for-Complying-with--t
- cst.gov.sa/en/business/services/Registration-for-Digital-Content-Platform-Servic
- lexismiddleeast.com/legislativeInsight/SaudiArabia/Saudi_Arabia_Anti-Cybercrime_Law/en
- gmedia.gov.sa/en
- my.gov.sa/en/services/698238
- practiceguides.chambers.com/practice-guides/media-entertainment-2025/saudi-arabia/trends-and-deve
- en.wikipedia.org/wiki/General_Authority_of_Media_Regulation
- en.wikipedia.org/wiki/Censorship_in_Saudi_Arabia
Next for Saudi Arabia: CybersecurityComprehensive law
Next topicOrientation, not legal advice: verify against the primary sources linked above. Last verified 23 May 2026. Methodology & how to cite · State of Technology Regulation 2026