Saudi law combines Islamic legal foundations and the Saudi Basic Law with royal decrees, codified statutes, implementing regulations, courts, ministries, and specialized regulators [S2] [S3] [S7] [S14] [S15]. The Basic Law states that the Kingdom’s constitution is the Qur’an and the Sunnah, while many modern business areas are governed through enacted laws and detailed regulations issued by competent authorities [S2]. Vision 2030 modernization has changed many business-facing areas, including investment, companies law, labor-market regulation, tax administration, data protection, capital markets, bankruptcy, and public consultation processes [S7] [S9] [S12] [S15] [S16] [S17] [S20].
This article is general educational information about laws in Saudi Arabia. It is not legal advice, does not apply rules to any specific case, and should not be used as a substitute for current official sources or qualified Saudi counsel.
Saudi Arabia’s legal system at a glance
The Saudi legal system is best understood as a layered system rather than a single code. At the constitutional level, the Basic Law of Governance sets core principles for the state, including the Islamic foundation of the legal order, the source of governmental authority, and principles of justice, consultation, and equality under Sharia [S2]. At the operational level, Saudi Arabia law includes royal decrees, statutes, implementing regulations, ministerial decisions, regulator rules, court procedures, and official platforms that publish or explain current requirements [S1] [S3] [S7] [S14] [S15].
That structure matters because “Saudi laws” can mean different things in different contexts. A statute approved by royal decree is not the same as an implementing regulation. A regulator’s rulebook is not the same as a public consultation draft. A press release about a new policy is not automatically the binding text that businesses must follow. In practical Saudi compliance work, the safer question is not only “what does the law say?” but also “what is the current binding instrument, which authority administers it, and are implementing regulations or regulator guidance in force?”
Islamic law Saudi Arabia references should also be handled carefully. The Basic Law gives the Qur’an and Sunnah constitutional status and frames justice under Sharia [S2]. At the same time, many business-facing fields now operate through codified laws and detailed regulatory instruments. Examples include the Companies Law, Labor Law, VAT Implementing Regulations, Personal Data Protection Law framework, Capital Market Law, Bankruptcy Law, Competition Law, and Civil Transactions Law [S9] [S11] [S14] [S15] [S16] [S17] [S19] [S21]. It is therefore too simple to describe the Saudi legal system as either entirely uncodified or entirely code-based. The accurate view is that Islamic legal foundations sit alongside a growing body of codified, regulator-administered legal rules.
Official translations require caution. The Bureau of Experts has an Official Translation Division, but public users should treat Arabic legal texts and current official publications as the controlling reference where the law itself or an authority’s latest requirements are at issue [S1]. English translations, ministry pages, and institutional summaries are useful for orientation, but a fact-specific decision may depend on the Arabic text, subsequent amendments, implementing regulations, sector-specific circulars, or the current practice of the relevant authority [S1].
For a broader policy entry point, see the main Saudi regulation hub. For more detailed business topics, the site also covers company formation in Saudi Arabia, the foreign investment law framework, labor law and Saudisation, taxation, and data protection.
How Saudi courts and legal institutions work
Saudi courts and legal institutions divide responsibilities across judicial bodies, ministries, prosecutors, and regulators. The Ministry of Justice describes the court structure as including First Instance Courts, Appellate Courts, the Supreme Court, and enforcement-related functions [S3]. Its First Instance Courts page identifies categories including general, criminal, personal status, labor, and commercial courts [S4]. These categories are important for businesses because the forum for a dispute may depend on the subject matter, the parties, and the procedure established by current law.
Commercial courts Saudi Arabia references usually point to the commercial court stream within the Ministry of Justice system [S4]. These courts are relevant to company disputes, commercial contracts, and other business matters subject to the applicable procedural rules. Labor courts are relevant to employment disputes, while personal status courts address family-status matters, and criminal courts address criminal cases [S4]. The Supreme Court and appellate levels sit above first-instance adjudication in the judicial hierarchy described by the Ministry of Justice [S3].
The Board of Grievances is a separate and important institution. Its official description frames it as the administrative judiciary [S5]. In general terms, that means disputes involving administrative decisions, public bodies, or government-related administrative matters may sit outside the ordinary commercial-court path and within the administrative judiciary, depending on the case and the applicable procedural rules [S5]. For companies dealing with licensing, government contracts, public tenders, or administrative penalties, the distinction between Ministry of Justice courts and the Board of Grievances can be material.
The Public Prosecution is another distinct institution. The National Platform identifies it as an agency with criminal prosecution responsibilities [S6]. That role should not be confused with civil dispute resolution, commercial litigation, regulatory supervision, or private compliance advice. In criminal matters, public prosecution authorities are part of the institutional system that addresses alleged offenses under the relevant legal framework [S6].
Regulators also shape legal outcomes even when they are not courts. The Capital Market Authority administers a capital-market framework that includes the Capital Market Authority, the Exchange, the Securities Depository Center, brokers, investment funds, disclosure, market manipulation, and insider trading chapters in the Capital Market Law materials [S16]. ZATCA administers VAT and tax-related rules, including VAT introduced under the GCC framework and supported by implementing regulations [S13] [S14]. SDAIA administers the Saudi data protection law framework through PDPL instruments, implementing regulations, transfer rules, and related documents [S15]. MISA regulates and promotes investment and investor licensing, including the investment-law framework for local and foreign investors [S7] [S8].
In practice, Saudi compliance often requires reading both court jurisdiction and regulator authority. A company’s issue may begin with a license, be shaped by an implementing regulation, require a filing through a ministry platform, and end up before a court only if a dispute arises. That is why an educational overview of Saudi law for foreigners and Saudi business law should avoid giving one-size-fits-all compliance instructions.
Main areas of Saudi law for businesses and investors
Business law in Saudi Arabia now spans several codified and regulator-administered domains. For company formation Saudi Arabia questions, the Companies Law is central. A Ministry of Commerce and Capital Market Authority announcement identified the new Companies Law as issued by Royal Decree M/132, published on July 22, 2022, effective January 19, 2023, with an adjustment period for companies [S9]. CMA’s Companies Law page describes the law’s aims as strengthening the company regulatory environment, easing procedures, supporting investment, improving governance, helping small and medium enterprises, encouraging local and foreign investment, and enabling sustainable financing [S10]. For a focused explanation, see the site’s Companies Law encyclopedia entry.
The Civil Transactions Law is another major modernization step. WIPO Lex lists the Civil Transactions Law as issued by Royal Decree M/191 on June 18, 2023, published on June 19, 2023, and effective December 17, 2023 [S21]. In broad terms, a civil transactions code gives businesses and courts a more structured statutory reference point for many private-law issues, although any specific contract or dispute may still require careful analysis of the statute, other applicable laws, and current judicial interpretation [S21].
Foreign investment law Saudi Arabia questions are now primarily tied to the updated investment-law framework and MISA. MISA describes the updated Investment Law as part of an integrated system for local and foreign investors, covering investor rights, registration, excluded activities, national security considerations, alternative dispute resolution, court appeal routes, and replacement of the old Foreign Investment Law framework [S7]. MISA’s ministry statute also frames the ministry’s role around regulating, developing, and promoting domestic and foreign investment and protecting investor rights [S8]. For topic depth, see foreign investment law and the Foreign Investment Law encyclopedia entry.
Labor law is a separate pillar. The Ministry of Human Resources and Social Development publishes the Labor Law as issued by Royal Decree M/51 dated September 27, 2005, with an English translation note [S11]. The implementing regulations are especially important because they address practical labor-market controls, including Saudization, Nitaqat, work-visa controls, and occupations reserved for Saudis [S12]. In public copy, it is safer to say “Saudi labor law” and “Saudi labour law” requirements generally depend on the current law, implementing regulations, ministry decisions, sector classifications, and employer circumstances. For more, see Saudi labour law and Saudisation and the Saudisation encyclopedia entry.
Tax and zakat rules are administered through a different institutional channel. ZATCA describes VAT Saudi Arabia as adopted under the GCC VAT framework signed in February 2017 and implemented in Saudi Arabia from January 1, 2018, with an initial 5 percent VAT rate and ZATCA administration [S13]. The VAT Implementing Regulations provide the kind of detailed compliance rules that cannot be reduced to a short summary [S14]. Zakat Saudi Arabia questions also require care because zakat, corporate income tax, withholding tax, VAT, customs, transfer pricing, and e-invoicing may apply differently depending on ownership, activity, residency, transaction type, and current ZATCA rules. For related site coverage, see Saudi taxation and the zakat encyclopedia entry.
Data protection has become a central business-law topic. SDAIA’s PDPL guidance identifies the Personal Data Protection Law as approved by Royal Decree M/19, in force from September 14, 2023, with compliance expected by September 14, 2024 [S15]. SDAIA also frames the framework as including implementing regulations, cross-border transfer regulation, rules, and standard contractual clauses or other instruments [S15]. That means Saudi data protection law should be read as a framework, not only as one statute. Businesses handling personal data generally need to monitor PDPL, SDAIA materials, cross-border transfer rules, and sector-specific data requirements where applicable [S15]. For more context, see Saudi data protection and the Personal Data Protection Law encyclopedia entry.
Capital markets are governed by a specialized regime. The CMA Capital Market Law materials include chapters covering the Capital Market Authority, the Exchange, the Securities Depository Center, brokers, investment funds, disclosure, market manipulation, and insider trading [S16]. Companies raising capital, listing securities, managing funds, advising on securities, or communicating with investors should distinguish ordinary company law from capital-market law and CMA regulations. The site’s Capital Market Authority entry gives a more focused institutional overview.
Bankruptcy and restructuring have also been codified. The Bankruptcy Commission states that the Bankruptcy Law contains seven procedures in the Commercial Courts and is structured across 17 chapters and 231 articles, with implementing regulations across 18 chapters and 98 articles [S17]. The commission, Eisar, was established on September 4, 2018 under Article 9 of the Bankruptcy Law and operates under the supervision of the Minister of Commerce [S18]. These materials illustrate how modern Saudi business law often combines a statute, implementing regulations, a responsible institution, and court procedures rather than a single source [S17] [S18].
Competition law is another area where businesses should separate public policy goals from enforceable rules. WIPO’s Competition Law text identifies the Competition Law as issued by Royal Decree M/75 on March 7, 2019, and references the General Authority for Competition as the relevant authority in the framework [S19]. In practice, competition issues may require analysis of mergers, market conduct, dominance, restrictive agreements, and current authority guidance under the applicable rules [S19].
Saudi law for foreigners and international companies
Saudi law for foreigners is not a single legal category. Foreign individuals, foreign-owned companies, international investors, regional headquarters, contractors, employees, and regulated financial institutions may each face different legal issues. For most international companies, the starting points are investment licensing, corporate form, commercial registration, sector licensing, tax registration, labor rules, data protection, contract enforceability, and dispute-resolution options. MISA licensing is usually central where a foreign investor seeks to conduct an investment activity in the Kingdom, subject to current investment-law rules and excluded activities [S7] [S8].
The updated investment-law materials are important because MISA frames the system as applying to local and foreign investors and addressing rights, registration, excluded activities, national security, alternative dispute resolution, and court appeals [S7]. That does not mean every foreign company can enter every sector on identical terms. Activities may still be excluded, restricted, regulated by sector authorities, affected by national-security review, or subject to licensing conditions [S7]. A regulated finance, telecoms, healthcare, education, mining, data, or capital-market activity may require sector permissions beyond investment registration.
Company formation Saudi Arabia planning should also distinguish entity formation from operational compliance. Forming or registering a company is not the same as obtaining every license needed to operate, employ staff, import goods, process personal data, bid for government work, or raise capital. The Companies Law may set the legal form and governance baseline, while MISA, the Ministry of Commerce, MHRSD, ZATCA, SDAIA, CMA, or another sector regulator may control specific operational obligations [S7] [S8] [S10] [S12] [S14] [S15] [S16].
Foreign employers should be particularly careful with labor and localization rules. The Labor Law provides the statutory base, but implementing regulations and ministry instruments can affect Saudisation, Nitaqat, work visas, and Saudi-reserved occupations [S11] [S12]. Because these requirements may vary by activity, employer size, sector, classification, and current ministry decisions, public guidance should avoid telling a company exactly how to comply. The safer educational point is that localization and workforce compliance are continuing obligations, not a one-time incorporation step [S12].
Foreign companies also need to read tax, zakat, and VAT rules through the correct lens. VAT is administered by ZATCA and supported by implementing regulations [S13] [S14]. Zakat and income-tax exposure may depend on ownership structure and current ZATCA rules, while cross-border transactions may raise withholding-tax, transfer-pricing, customs, or treaty questions. Those are fact-specific issues requiring official current sources and qualified advice rather than a generic article.
Data is now a core issue for international companies serving Saudi customers. The PDPL came into force on September 14, 2023, with compliance expected by September 14, 2024, and SDAIA’s framework includes implementing regulations and transfer-related instruments [S15]. Cross-border processing, cloud services, customer analytics, HR platforms, and group-company data sharing may raise Saudi data compliance questions if personal data is within the law’s scope [S15].
Legal reforms under Vision 2030
Vision 2030 legal reform is not one law. It is a broad modernization program visible across investment, courts, commercial legislation, public consultation, data governance, tax administration, capital markets, bankruptcy, and labor-market regulation. The common pattern is greater codification, digital administration, specialized institutions, and more detailed implementing regulations. That direction can make the legal environment more legible for businesses, but it also increases the importance of tracking current official instruments.
Investment reform is one example. MISA describes an updated Investment Law that replaces the older foreign-investment framework and forms part of an integrated system for local and foreign investors [S7]. The ministry’s statute frames MISA as responsible for regulating, developing, and promoting investment and investor rights [S8]. This reflects a broader shift from ad hoc market entry toward an institutional investment system.
Company-law reform is another example. The new Companies Law was issued by Royal Decree M/132, published on July 22, 2022, and effective January 19, 2023 [S9]. CMA’s explanation emphasizes procedural simplification, governance, SMEs, local and foreign investment, and sustainable financing [S10]. Those aims align with Vision 2030’s business-environment modernization, but the binding details still depend on the law and its applicable regulations [S9] [S10].
Private-law codification also matters. The Civil Transactions Law was issued in June 2023 and became effective in December 2023 [S21]. For businesses, that kind of codification may support greater predictability in contract and civil obligations, subject to how courts and practitioners apply the statute in real disputes [S21]. The point is not that uncertainty disappears, but that more areas now have a statutory reference point.
Digital and data reform has moved quickly. The PDPL framework includes a law approved by Royal Decree M/19, an in-force date of September 14, 2023, a compliance expectation date of September 14, 2024, implementing regulations, transfer regulation, and related SDAIA instruments [S15]. This is a clear example of a Vision 2030-era business rule that requires companies to read the law, the implementing regulations, and regulator materials together [S15].
Public consultation has also become more formalized. Istitlaa is Saudi Arabia’s public consultation platform for draft laws and regulations, and its official description links consultation to transparency, legislative efficiency, and competitiveness [S20]. Consultation materials are useful signals, but they should not be treated as final binding law unless and until the relevant instrument is issued by the competent authority in the required form [S20].
Bankruptcy, capital markets, and competition law show the same institutional trend. The Bankruptcy Commission materials describe a structured bankruptcy law and implementing regulations, along with procedures in the Commercial Courts [S17]. CMA’s capital-market materials show a specialized securities framework covering market institutions, brokers, funds, disclosure, manipulation, and insider trading [S16]. The Competition Law was issued by Royal Decree M/75 on March 7, 2019, with the competition authority positioned in the framework [S19].
How to read Saudi legal requirements safely
A safe reading method starts by identifying the type of source. Binding law may appear in a royal decree, statute, regulation, official gazette publication, or authority-issued rule. Implementing regulations fill in details that a statute may leave open. Regulator guidance can explain expectations, platforms, forms, or interpretations, but its legal status may differ from a statute or regulation. Consultation drafts and press materials can be useful, but they are not a substitute for the issued legal instrument [S1] [S14] [S15] [S20].
Next, identify the competent authority. Ministry of Justice court pages help orient the ordinary court system [S3] [S4]. The Board of Grievances materials help identify administrative-judiciary issues [S5]. MISA materials are relevant to investment registration and investor rights [S7] [S8]. MHRSD materials are relevant to labor law, implementing regulations, Saudisation, Nitaqat, and work-visa controls [S11] [S12]. ZATCA materials are relevant to VAT and tax administration [S13] [S14]. SDAIA materials are relevant to PDPL and Saudi data compliance [S15]. CMA materials are relevant to securities and listed-company matters [S16].
Then check dates and amendments. A source may describe a law as issued on one date, effective on another date, and subject to an adjustment or compliance period [S9] [S15] [S21]. A ministry page may summarize a framework, while the implementing regulations may contain the operational detail [S12] [S14] [S15] [S17]. A public consultation may show policy direction before final issuance [S20]. This is why old PDFs, unofficial summaries, and search-result snippets can be risky in Saudi regulatory work.
Finally, separate education from advice. A general article can explain that commercial courts exist, that MISA administers investment rules, that the PDPL is in force, that VAT has implementing regulations, and that Saudisation rules appear in labor implementing regulations [S4] [S7] [S12] [S14] [S15]. It should not tell a specific company whether its activity is licensed, whether its data transfer is lawful, whether a worker is correctly classified, or whether a tax position is acceptable. Those questions require current official sources, complete facts, and qualified Saudi counsel.
FAQ
What is the legal system of Saudi Arabia based on?
Saudi Arabia’s legal system is based on Islamic legal foundations reflected in the Basic Law, together with royal decrees, codified statutes, implementing regulations, courts, ministries, and regulators [S2]. The Basic Law states that the Qur’an and Sunnah are the Kingdom’s constitution and frames justice, consultation, and equality under Sharia [S2]. Modern business areas are also governed by codified laws such as the Companies Law, Labor Law, VAT regulations, PDPL framework, Bankruptcy Law, Competition Law, Capital Market Law, and Civil Transactions Law [S9] [S11] [S14] [S15] [S16] [S17] [S19] [S21].
Is Sharia law in Saudi Arabia the same as all Saudi law?
No. Sharia law in Saudi Arabia is central to the constitutional and legal foundation, but Saudi Arabia also uses enacted statutes, implementing regulations, ministry rules, regulator frameworks, and specialized courts [S2] [S3] [S4]. It is more accurate to say that Islamic law Saudi Arabia foundations coexist with an expanding body of codified and regulator-administered law, especially in business-facing fields [S9] [S15] [S21].
Which courts handle business disputes in Saudi Arabia?
Commercial courts sit within the Ministry of Justice first-instance court categories and are relevant to many business disputes [S4]. Administrative disputes involving government bodies may fall within the Board of Grievances as the administrative judiciary, depending on the matter and current procedural rules [S5]. Bankruptcy procedures are described by the Bankruptcy Commission as procedures in the Commercial Courts under the Bankruptcy Law framework [S17].
What laws should foreign investors review first?
Foreign investors generally start with the investment-law framework, MISA registration or licensing, company formation, tax and VAT, labor and Saudisation, data protection, sector licensing, and dispute-resolution provisions [S7] [S8] [S10] [S12] [S14] [S15]. Regulated sectors may also involve authorities such as CMA, ZATCA, SDAIA, MHRSD, or other specialized regulators, depending on the activity [S12] [S14] [S15] [S16].
How is Saudi data protection regulated?
Saudi data protection law is centered on the PDPL framework administered by SDAIA. SDAIA guidance states that the PDPL was approved by Royal Decree M/19, came into force on September 14, 2023, and expected compliance by September 14, 2024 [S15]. The framework includes implementing regulations, cross-border transfer regulation, rules, standard contractual clauses, and related instruments [S15].
How should companies use this article?
Use this article as a map of the Saudi legal system, not as a compliance instruction. For binding requirements, confirm the current Arabic legal text, the latest implementing regulations, regulator materials, and any sector-specific rules, then use qualified Saudi counsel for fact-specific decisions [S1]. Public consultation drafts and press materials can help identify policy direction, but they should not be treated as final binding law unless issued through the required legal process [S20].
Sources
- [S1] Bureau of Experts Official Translation Division, official translation authority page, accessed 2026-05-31, https://www.boe.gov.sa/en/Translation/Pages/AboutTranslation.aspx
- [S2] Basic Law of Governance, Royal Decree A/90, WIPO/BOE source, accessed 2026-05-31, https://www.wipo.int/wipolex/en/legislation/details/7973
- [S3] Ministry of Justice Courts page, official ministry page, accessed 2026-05-31, https://www.moj.gov.sa/English/Ministry/Courts/Pages/default.aspx
- [S4] Ministry of Justice First Instance Courts, official ministry page, accessed 2026-05-31, https://moj.gov.sa/english/ministry/courts/pages/firstcourts.aspx
- [S5] Board of Grievances About page, official institution page, accessed 2026-05-31, https://www.bog.gov.sa/en/AboutUs/Pages/default.aspx
- [S6] Public Prosecution National Platform page, official government platform, accessed 2026-05-31, https://my.gov.sa/en/agencies/17570
- [S7] MISA Updated Investment Law, official ministry page, accessed 2026-05-31, https://misa.gov.sa/activities/laws-regulations
- [S8] MISA Ministry Statute, official ministry page, accessed 2026-05-31, https://misa.gov.sa/about/ministry-statute/
- [S9] Ministry of Commerce/CMA New Companies Law notice, official announcement, July 2022, https://cma.gov.sa/en/MediaCenter/PR/Pages/-New-Companies-Law.aspx
- [S10] CMA Companies Law page, official regulator page, accessed 2026-05-31, https://cma.gov.sa/RulesRegulations/Companies_Law/Pages/default.aspx
- [S11] MHRSD Labor Law PDF, official ministry PDF, 2023 PDF publication, https://www.hrsd.gov.sa/sites/default/files/2023-02/Labor.pdf
- [S12] MHRSD Labor Law Implementing Regulations, official ministry PDF, 2023 PDF publication, https://www.hrsd.gov.sa/sites/default/files/2023-02/The%20Implementing%20Regulations%20of%20Labor%20Law%20and%20its%20Annexes.pdf
- [S13] ZATCA VAT overview, official authority page, accessed 2026-05-31, https://zatca.gov.sa/en/RulesRegulations/VAT/Pages/About_Vat.aspx
- [S14] ZATCA VAT Implementing Regulations, official authority page, accessed 2026-05-31, https://www.zatca.gov.sa/en/RulesRegulations/Taxes/Pages/VATImplementingRegulations.aspx
- [S15] SDAIA PDPL guidance, official authority guidance page, accessed 2026-05-31, https://dgp.sdaia.gov.sa/wps/portal/pdp/knowledgecenter/details/PDPLCP/
- [S16] CMA Capital Market Law, official regulator page, accessed 2026-05-31, https://cma.gov.sa/en/RulesRegulations/CMALaw/Pages/default.aspx
- [S17] Bankruptcy Commission Law and Regulations, official commission page, accessed 2026-05-31, https://bankruptcy.gov.sa/en/BankruptcyLaw/SystemAndRegulations/Pages/default.aspx
- [S18] Bankruptcy Commission homepage, official commission page, accessed 2026-05-31, https://bankruptcy.gov.sa/en/Pages/default.aspx
- [S19] Competition Law, WIPO institutional/BOE translation PDF, Royal Decree M/75 dated March 7, 2019, https://www.wipo.int/wipolex/edocs/lexdocs/laws/en/sa/sa070en.pdf
- [S20] Istitlaa public consultation platform, official platform page, accessed 2026-05-31, https://istitlaa.ncc.gov.sa/en/About/Pages/default.aspx
- [S21] Civil Transactions Law, WIPO Lex law entry, issued June 18, 2023, https://www.wipo.int/wipolex/en/legislation/details/22447