Updates on Policies

We are pleased to share with you the latest open public consultations on new draft laws and regulations in Saudi Arabia, currently published on the Istitlaa Public Consultation Portal (منصة استطلاع). These consultations represent important upcoming regulatory developments, and stakeholders are invited to submit their feedback directly through the Istitlaa portal before the closing dates.

Below is a summary of the key open consultations from the past month:

1. Insurance Market Code of Conduct Regulation

Regulator: Saudi Insurance Authority

This draft regulation introduces a comprehensive code of conduct for the insurance market, aiming to enhance transparency and fairness between insurers, intermediaries, and beneficiaries. It focuses on regulating marketing practices, disclosure obligations, claims handling, complaint mechanisms, and overall professional conduct within the insurance sector.

Consultation deadline: 24 November 2025

2. Energy Efficiency Framework in the Utilities Sector

Regulator: Saudi Energy Efficiency Center

This framework establishes mandatory energy efficiency requirements and performance targets for utility-related activities, including power generation, cogeneration, seawater desalination, and electricity transmission and distribution networks. It also outlines compliance, monitoring, and reporting obligations.

Consultation deadline: 25 November 2025

3. Updated Oversight Framework for Payment Systems and Their Operators

Regulator: Saudi Central Bank (SAMA)

The draft updates SAMA’s oversight approach for payment and settlement systems, aligning it with the Payments and Payment Services Law and international standards such as the Principles for Financial Market Infrastructures (PFMI). It clarifies regulatory expectations around licensing, governance, risk management, and supervisory assessments for payment system operators.

Consultation deadline: 27 November 2025

4. Amendments to the Implementing Regulation of the Companies Law (Listed Joint Stock Companies)

Regulator: Capital Market Authority (CMA)

These proposed amendments focus on corporate governance enhancements for listed companies, particularly rules related to the removal of board members, shareholder rights, and the calculation and distribution of profits. The objective is to strengthen investor protection and market confidence.

Consultation deadline: 12 December 2025

5. National Cryptographic Standards (Updated Version)

Regulator: National Cybersecurity Authority (NCA)

The draft updates the Kingdom’s national cryptography standards, setting out approved cryptographic algorithms, key management requirements, security levels, and PKI standards. It also addresses secure communications protocols and long-term cryptographic resilience.

Consultation status: Currently open

6. Employers’ Commitment to Health Insurance Coverage Policy

Regulator: Council of Cooperative Health Insurance (CCHI)

This policy reinforces employer obligations to provide mandatory health insurance coverage for employees and eligible dependents. It clarifies coverage start dates, compliance requirements, enforcement mechanisms, and penalties for non-compliance, strengthening protections for beneficiaries.

Consultation status: Currently open

📌 How to Participate All feedback can be submitted directly through the Istitlaa portal via National Single Sign-On: https://istitlaa.ncc.gov.sa