Beyond compliance: Embedding privacy, governance, and innovation in KSA’s 2030 vision
Since 2024, the Cyber team at Deloitte Middle East has been deeply engaged with KSA’s 2030 vision across multiple fronts, supporting both the public and private sectors in the establishment and operationalization of their Data Privacy and Protection function, seconding Deloitte experts to operationalize it, and driving governance initiatives that elevate the overall cyber posture.
Our involvement has not been limited to technical delivery. Deloitte Middle East has partnered with clients outside formal engagements as well. Data Protection Officers (DPOs) from both public and private sectors took part in the very first Next-Gen DPO program hosted at Deloitte’s Riyadh office, where leading DPOs from across the Kingdom gathered to influence the future of data protection in the region. In addition, Deloitte’s Women in Cyber campaign highlighted many female DPOs, showcasing the importance of role models who inspire the next generation of leaders. These initiatives reflect Deloitte Middle East’s commitment to being a true partner inside and outside the consultancy realm.
Looking ahead, KSA is setting the benchmark for one of the most ambitious national transformations. With its vision and the growing role of AI, the space for collaboration is vast—spanning governance, risk management, and the deployment of secure, forward-looking technologies. Among these is ServiceNow, where Deloitte has recently secured multiple projects to deliver IT Asset Management solutions designed to optimize costs, strengthen compliance, and enhance asset visibility across enterprises. Building on this momentum, a new wave of data management initiatives is set to launch, such as uplifting privacy maturity, implementing a robust data classification framework, and rolling out a training and awareness program that extends the impact of current and past projects. Together, these efforts will embed a culture of data privacy and protection that reaches beyond the Data Management function and becomes fully ingrained across the entire organization.
At Deloitte Middle East, we remain committed to supporting KSA at every step, making sure we create an “impact that matters.” There are few to no impacts that are greater than enabling nations to achieve their visions, and the 2030 vision has grown into exactly that kind of impact.
As Eliza Lozan, Partner at Deloitte Middle East, reflects:
“Our partnerships with our clients are built on trust, innovation, and shared success. They have extended beyond a single engagement and were made possible by the visionary leadership of our Cyber Partners, alongside the unwavering support of Deloitte’s Data Privacy and Protection teams throughout this journey.”
