The fine lands on the institution, not the agent.
In Saudi Arabia, a data protection breach can cost up to SAR 5 million, doubled for repeat offences. In Egypt, up to EGP 5 million — and the compliance grace period ends within weeks, at the start of November 2026.
