Assessing the Adequacy of Saudi Arabia’s Anti-Cybercrime Law Against Deepfake-Enabled Privacy Violations

Reema Ramy Yaghmour

 

Abstract: The rise of artificial intelligence has enabled the creation of deepfakes, highly realistic synthetic media that can significantly undermine the right to privacy and facilitate reputational harm. This article evaluates whether Saudi Arabia’s 2007 Anti-Cybercrime Law provides adequate punitive protection against such harms, given that the Law predates modern AI technologies and addresses only traditional cyber offences. The central question asks whether Saudi Arabia’s Anti-Cybercrime Law provides adequate punitive protection against deepfake privacy violations. Using a doctrinal approach, the study examines the Law through the principle of legality and the elements of criminal offences to determine whether deep-fake conduct falls within its scope. A comparative analysis with China’s 2023 deep synthesis regulation further contextualises the extent of the legislative gap. The findings demonstrate that the Saudi framework lacks the clarity, foreseeability, and definitional precision required to criminalise deepfake-related violations, thereby conflicting with the requirements of Sustainable Development Goal (SDG) 16, which calls for effective and accountable legal institutions. Accordingly, this article concludes that legal reform is necessary, whether by amendment or standalone regulation, to ensure adequate protection against emerging AI-enabled privacy threats.