Pillar IV · Regulatory Radar
What changed, and when it bites
A timeline of live regulatory changes across the covered Saudi authorities — effective dates, compliance deadlines, risk and who it hits. Every interpretation carries its verification status.
Risk6/6
2026-05-01highMinistry of Human Resources & Social Development (MHRSD)RIC-0006
MHRSD: revised Saudization (Nitaqat) bands for health professions
Phased increase in required Saudization ratios announced.
◐ Analyst-reviewedDeadline: 2026-11-01
Hospitals (General/Tertiary)Specialty Clinics & Day SurgeryHome HealthcareSenior/Elderly CarePharmacies & Retail Pharmacy
2026-04-01mediumZakat, Tax & Customs Authority (ZATCA)RIC-0004
ZATCA: e-invoicing (Fatoorah) integration phase wave
ZATCA announced the next integration wave and the cutoff revenue threshold.
◐ Analyst-reviewedDeadline: 2026-09-30
Hospitals (General/Tertiary)Specialty Clinics & Day SurgeryPharmacies & Retail PharmacyDiagnostics & LabsMedical Equipment & Supplies
2026-03-01highSaudi Central Board for Accreditation of Healthcare Institutions (CBAHI)RIC-0003
CBAHI: updated accreditation standards edition for hospitals
Revised standards published; facilities surveyed after the effective date are assessed against the new edition.
✓ Expert-verifiedDeadline: 2026-12-31
Hospitals (General/Tertiary)Long-Term CareRehabilitation Facilities
2026-02-15mediumSaudi Food & Drug Authority (SFDA)RIC-0005
SFDA: medical device establishment licence (MDEL) renewal & UDI
UDI enforcement extended to additional device classes.
⚠ AI — unreviewedDeadline: 2026-08-15
MedTech & Medical DevicesMedical Equipment & SuppliesDiagnostics & LabsImaging Centers
2026-01-01criticalNPHIESRIC-0002
NPHIES: mandatory e-claims and pre-authorization integration
Next wave of facility categories brought into mandatory scope with a hard cutover date.
◐ Analyst-reviewedDeadline: 2026-06-30
Hospitals (General/Tertiary)Specialty Clinics & Day SurgeryPrimary Care & PolyclinicsDiagnostics & LabsRCMPayers & Insurance
2025-09-14highSDAIA & NDMORIC-0001
PDPL: appoint a data protection officer and register processing activities
Enforcement window for the DPO and RoPA obligations closed; SDAIA is now actively reviewing controller registrations.
✓ Expert-verifiedDeadline: 2026-07-31
Hospitals (General/Tertiary)Specialty Clinics & Day SurgeryDiagnostics & LabsHealthTech & Digital HealthEMR/HIS/Health ITNPHIES & Health Data Infrastructure