Why Outsourcing & Cloud Compliance Matters As financial institutions adopt cloud technology and outsourcing models to enhance efficiency and innovation, they simultaneously increase their exposure to third-party risk, cybersecurity threats, and regulatory scrutiny. While external partners can strengthen performance and accelerate digital transformation, they also create dependencies that must be governed carefully. Regulators in Saudi Arabia, including SAMA, CMA, CST, and The Saudi Data & AI Authority (SDAIA) emphasize that when financial services rely on cloud or outsourced operations, the organization remains legally and operationally responsible, even if another provider is performing the function. This means that: Accountability cannot be transferred to vendors or technology providers Data protection, privacy, and security obligations remain with the institution Service continuity and system

Key Changes Compared to the Previous Enforcement Law 1. Digital and Electronic Enforcement The new law emphasizes digital transformation in enforcement procedures: Courts now use electronic platforms to issue and track enforcement orders in real time. Notifications to debtors and creditors are sent electronically, reducing delays caused by manual processes. Digital enforcement improves transparency, accountability, and auditability, ensuring compliance with statutory timelines. Impact: Organizations must adopt electronic tracking systems and train legal and administrative teams to interact with the digital enforcement ecosystem. 2. Enforcement of Foreign Judgments and Arbitral Awards The new law clarifies the procedures for enforcing foreign judgments and arbitral awards: Explicit guidelines are provided for evaluating foreign decisions while respecting Saudi legal principles. Compliance with GCC treaties