Configure Arqam360 for Saudi PDPL

This is a setup checklist, not a summary of the law: it maps what Saudi Arabia's Personal Data Protection Law (PDPL) asks of a website to the Arqam360 settings that handle it.

For what PDPL requires of cookies and consent, and what SDAIA has enforced, read the Saudi PDPL cookie consent guide.

New to the law? What PDPL is, in one page.

1. The banner: opt-in, in Arabic

Every Arqam360 banner starts with analytics, marketing and preferences switched off, so only necessary cookies run before the visitor chooses. If your site has visitors from several countries, turn on Auto Regime Detection in the Widget tab's compliance settings: visitors from Saudi Arabia then get the opt-in model with Arabic as the default language. If a visitor's country cannot be determined, the banner keeps its default opt-in model. If your audience is only Saudi, set the banner language to Arabic in the Widget tab instead.

2. Tags that must wait

Google tags read Google Consent Mode v2, which Arqam360 sets to denied until the visitor agrees. Tags that do not read it, such as the Meta Pixel or TikTok, need script blocking: switch on Enforce Script Blocking in the same compliance settings and Arqam360 holds known tracker scripts until consent. It is off by default because blocking scripts can break a page, so test your site after turning it on.

3. Consent records

Each decision is stored with its date and time and the categories the visitor accepted or refused. Browse them in the Consent Logs tab and export a CSV for a domain when you need to show what a visitor agreed to.

4. Privacy and cookie policy

Run a cookie scan first so the policy lists the cookies your site actually sets, then generate an Arabic or English policy from Compliance → Policies. Generated policies are templates; have them reviewed before you publish.

5. Requests from data subjects

PDPL gives people the right to access, correct and delete their personal data. On Pro and above, the DSAR tab logs each request and tracks its status; Handle DSARs walks through the workflow.

Not sure where your site stands? Take the PDPL readiness quiz: ten questions and a score, before you change any setting.