For multinational companies operating in both the European Union and Saudi Arabia, one question comes up frequently: “We’re already GDPR compliant. Doesn’t that cover PDPL too?” The short answer is no. Saudi Arabia’s Personal Data Protection Law (PDPL) and the European Union’s General Data Protection Regulation (GDPR) share several foundational concepts.