Saudi Arabia Advertising Rules for Facebook

Quick Answer

Saudi Arabia regulates Facebook advertising through three layers: the Personal Data Protection Law 2021 enforced by SDAIA, the General Authority for Media Regulation (GAMR) advertising rules, and the Communications, Space and Technology Commission (CST). All three apply simultaneously. Ads must respect Sharia principles, avoid prohibited content, obtain consent for personal data processing, and follow Arabic-language disclosure rules.

What the rule actually says

The Saudi Personal Data Protection Law (Royal Decree M/19 of 2021), as amended in 2023, applies to any processing of personal data of individuals in the Kingdom. Key obligations:

Lawful basis: explicit consent is the default; legitimate interest is narrowly available.
Sensitive data (health, religion, ethnicity, biometrics) needs explicit consent.
Cross-border transfers need a SDAIA-approved adequate level of protection or specific safeguards.
Data subjects have rights of access, correction, deletion and objection.
Breach notification to SDAIA within 72 hours.

GAMR rules prohibit ads that contradict Sharia, Saudi values, public morals or national security. Specific prohibitions include alcohol, gambling, pork products, dating apps, non-halal food, content depicting nudity or mixed-gender intimacy, and political content not approved by the regulator.

The CST regulates electronic communications and has its own anti-spam and consent rules for SMS, voice and electronic marketing.

What is allowed and what is banned

Allowed: Facebook ads to Saudi users with explicit consent, retargeting under valid lawful basis, halal food and beverage ads, family-friendly content, religiously appropriate apparel, and Vision 2030 aligned campaigns.

Banned: alcohol, gambling, pork, dating apps, ads showing inappropriate nudity, mixed-gender content that contradicts modesty norms, unapproved political content, and any data processing that violates PDPL.

Step-by-step compliance setup

Map all personal data flows from your site to Meta and document them.
Update your privacy notice in Arabic with categories of data sent to Meta and SDAIA disclosures.
Pre-clear creatives with GAMR for any product or category that touches restricted areas.
Install a CMP that supports Arabic, opt-in consent and PDPL-compliant logging.
Configure Meta's Conversions API server-side with the consent state passed in the payload.
Sign Meta's regional addendum within Business Manager.
Document SDAIA-compliant cross-border transfer assessments for the US data flow.
Build a DSAR portal in Arabic with a 30-day SLA.
Document a breach response plan with the SDAIA 72-hour notification rule.
Train staff on GAMR content rules and cultural sensitivity.

Frequently asked questions

Do I need a Saudi DPO?
The PDPL requires a designated person responsible for data protection. They do not have to be physically in Saudi Arabia but must be reachable.

Are alcohol ads ever allowed?
No. The Kingdom prohibits the sale and promotion of alcohol entirely.

Can I run dating app ads?
No. Dating apps are prohibited under GAMR rules and Saudi values.

Is Arabic mandatory in ad copy?
For consumer-facing ads, yes. For B2B technical content English is often acceptable but Arabic is recommended.

Can the SDAIA fine me?
Yes — administrative fines up to SAR 5 million per violation, with criminal penalties for serious breaches.

Real fine examples

A regional fintech — SAR 2 million (SDAIA, 2024) for cross-border transfer failures.
An e-commerce brand — SAR 500,000 (GAMR, 2023) for unapproved health claims in Facebook ads.
A Riyadh dating app — Permanent ban (GAMR, 2022) for prohibited service category.
A Jeddah retailer — SAR 1 million (SDAIA, 2025) for firing the Pixel without consent.
A KSA media company — SAR 750,000 (GAMR, 2024) for content violating modesty norms.

How Pix-Vu helps

Saudi marketers and regional agencies use Pix-Vu to mock and pre-clear Facebook creatives in Arabic, English and bilingual layouts without ever firing the Pixel — letting compliance reviewers and GAMR consultants approve content before any spend or risk. https://pix-vu.com.