The Middle East and North Africa region stands at a pivotal crossroads in artificial intelligence governance. As global AI development accelerates, governments across the Gulf Cooperation Council (GCC) states and broader MENA region are rapidly establishing comprehensive regulatory frameworks, strategic initiatives, and ethical guidelines to harness AI's transformative potential whilst managing associated risks. This atlas provides an exhaustive survey of every major AI policy, regulation, strategy, and framework across the region - equipping policymakers, business leaders, technologists, and citizens with the intelligence needed to navigate this complex landscape.
The governance approaches vary significantly across the region, from the United Arab Emirates' forward-leaning ecosystem promoting innovation, to Saudi Arabia's comprehensive national strategy tied to Vision 2030 economic transformation, to emerging standalone AI legislation in jurisdictions like Bahrain. What unites these diverse approaches is recognition that AI governance is not a luxury but a necessity - essential for economic competitiveness, national security, public safety, and societal trust.
MENA's positioning in global AI governance has become increasingly strategic. The region hosts some of the world's most capital-rich governments, proven track records in technology infrastructure investment, and unique market opportunities given its population of over 400 million people. Yet MENA also faces distinct challenges: diverse regulatory traditions, varying digital maturity across sectors, multilingual AI requirements, and the need to integrate AI development with Islamic principles and local cultural values. Effective governance frameworks must address these complexities whilst maintaining international competitiveness and attracting both domestic innovation and foreign investment.
By The Numbers: MENA AI Governance at a Glance
- 9 countries with dedicated national AI strategies or programmes across the surveyed region
- 8+ standalone AI-related laws or comprehensive frameworks enacted or approved since 2024
- AED 335 billion (approximately USD 91 billion) economic growth target for UAE AI sector by 2031
- SAR 5 million (approximately USD 1.3 million) maximum fines under Saudi Arabia's Personal Data Protection Law
- QAR 2.4 billion national incentive package dedicated to AI development in Qatar
- 50,000 AI professionals targeted for upskilling in Bahrain by 2030
- 26,000 new ICT jobs targeted in Qatar through AI and digital initiatives
- 240,000 digital jobs target for Morocco by 2030
- 1.5 gigawatts of dedicated data centre capacity planned for Saudi Arabia by 2030
- 45% of UAE GDP contribution target from AI-enabled sectors by 2031
- USD 1.4 trillion in US investment commitments to UAE announced in May 2025
- USD 80 billion invested in Saudi Arabia by Google, Oracle, and AMD for AI infrastructure
- Over 400 million people across MENA region representing significant market opportunity for AI applications
The Strategic Context: Why MENA AI Governance Matters
Understanding MENA AI governance requires appreciating the broader strategic context. The region's governments have committed trillions in capital to digital transformation, recognising that AI will determine 21st-century economic competitiveness. Unlike previous technology waves where MENA largely imported solutions from elsewhere, these jurisdictions are now investing heavily in creating indigenous AI ecosystems capable of developing region-specific solutions.
This matters because AI systems trained primarily on Western data and optimised for Western languages and cultural contexts perform poorly in MENA markets. Healthcare AI trained on predominantly American or European patient data may misdiagnose conditions prevalent in Arab populations. Financial AI systems trained on Western banking practices struggle with Islamic finance instruments. Language models trained primarily on English perform inadequately for Arabic. These gaps explain why MENA governments are insisting on domestic AI development capability and why governance frameworks emphasise local adaptation alongside global standards compliance.
The geopolitical dimension adds further urgency. As US-China competition over AI supremacy intensifies, MENA countries are carefully positioning themselves. Some (particularly UAE and Saudi Arabia) pursue closer partnerships with American technology companies and strategic frameworks. Others explore partnerships with Chinese firms offering alternative infrastructure and business model approaches. Still others, like Egypt and Morocco, attempt multi-aligned strategies engaging with diverse technology sources. Governance frameworks both reflect and enable these strategic positioning choices.
United Arab Emirates: The Innovation Pioneer with Governance Guardrails
The UAE has positioned itself as the region's most advanced AI governance ecosystem, balancing innovation encouragement with robust oversight. This balancing act reflects a deliberate strategic choice: attract global AI talent and investment whilst maintaining government visibility into system development and deployment. The cornerstone of this framework is the National AI Strategy 2031, which provides the strategic vision for integrating AI across government and economy with explicit targets for economic contribution (45% of GDP), employment creation, and research capacity.
To operationalise this strategy, the UAE established a dedicated AI Office within government to coordinate policy implementation and sector development. This centralised coordination function ensures consistency across different government entities and reduces regulatory friction for private sector actors. The AIATC (Artificial Intelligence and Advanced Technology Council), established under Law No. 3 of 2024, provides governance oversight with explicit authority to set AI standards, approve high-impact system deployments, and enforce compliance with national AI principles.
Key regulatory components include the Dubai AI Ethics Handbook and Guidelines, which establish ethical principles for AI development and deployment covering algorithmic transparency, bias mitigation, human oversight, and accountability mechanisms. In the financial sector, the Abu Dhabi Global Market (ADGM) has implemented comprehensive data protection requirements aligned with international standards whilst accommodating local regulatory preferences. The regulatory framework specifically addresses cross-border data flows critical for global financial institutions operating UAE hubs.
Healthcare AI faces particular regulatory scrutiny through the Software as a Medical Device (SaMD) Framework, which establishes approval pathways for AI-driven medical applications. This framework requires clinical validation, cybersecurity assessment, and ongoing monitoring of deployed systems. The DIFC RegLab (Dubai International Financial Centre Regulatory Lab) provides sandboxing opportunities for fintech and AI companies to test innovations within regulatory bounds, accelerating responsible innovation and enabling regulators to understand emerging technologies before widespread deployment.
In June 2024, the UAE published the Charter for AI Development, a comprehensive governance document outlining principles for responsible AI creation and deployment. This charter addresses accountability, transparency, human-centred design, and cultural alignment. It explicitly considers the role of Islamic principles in AI governance and establishes mechanisms for public consultation in AI standard-setting. The framework targets AED 335 billion in economic growth from AI-enabled sectors and aims for AI to contribute 45% of UAE's total GDP by 2031. The strategy encompasses vertical sector development (healthcare, finance, energy, government), infrastructure investment (data centres, computing capacity), talent cultivation (university programmes, international recruitment), and research partnerships with global institutions.
The Middle East's own AI conversation and comparisons of Arabic LLMs highlight how UAE's governance framework supports indigenous AI development capability, particularly for Arabic language systems and region-specific applications.
Saudi Arabia: Vision 2030 Integration and Economic Transformation
Saudi Arabia integrates AI governance within the broader Vision 2030 economic diversification programme, reflecting recognition that AI development is inseparable from national economic priorities. The National Strategy for Data and Artificial Intelligence (NSDAI) establishes the strategic foundation with explicit targets for research capacity, private sector development, and AI-enabled services. The Saudi Data and Artificial Intelligence Authority (SDAIA) serves as the central implementing body responsible for policy coordination, infrastructure development, international partnerships, and private sector engagement., as highlighted by Saudi Data and AI Authority (SDAIA)
The Personal Data Protection Law (PDPL), which became fully enforceable on 14 September 2024, establishes data governance requirements applicable to all AI systems processing personal information. Non-compliance carries substantial penalties, with fines reaching SAR 5 million. The law covers data collection, processing, storage, and deletion across both public and private sectors, establishing individual rights to access, correction, and deletion. The PDPL provides the regulatory backbone for all AI system development, effectively making it a de facto AI governance requirement since virtually all meaningful AI systems process personal data.
HUMAIN (Human-Centric AI Governance Framework) represents Saudi Arabia's approach to ensuring AI systems remain aligned with national values and public benefit. HUMAIN establishes principles for AI transparency, accountability, and human control. It requires organisations deploying AI to conduct impact assessments, establish oversight mechanisms, and maintain human decision-making authority for consequential decisions. The framework emphasises AI as a tool amplifying human capability rather than replacing human judgment, particularly in domains affecting public welfare.
The National Data Center Strategy targets 1.5 gigawatts of dedicated capacity by 2030, enabling large-scale AI model training and deployment. This infrastructure investment removes a critical bottleneck preventing indigenous AI development - the computational capacity required to train large language models or advanced AI systems. Saudi Arabia has also adopted the ISO 42001 Standard for AI Management Systems, providing certification pathways for organisations demonstrating governance maturity. This moves AI governance beyond principles to measurable, auditable practices.
For related analysis, see: [Oman's Strategic Digital Transformation and AI Roadmap](/policy/oman-digital-transformation-ai-roadmap).
Education integration is critical to the strategy: the national K-12 AI curriculum launches in September 2025, ensuring foundational AI literacy across the student population. This curriculum doesn't teach narrow AI employment skills but rather AI concepts, implications, and applications across domains, preparing all citizens for an AI-transformed economy regardless of final career path. University partnerships with global institutions complement this foundational education, attracting international AI researchers whilst building local capacity.
Aramco, the national oil company, has emerged as a significant AI adopter and innovator, developing AI applications for energy optimisation, exploration, and refining. Aramco's transformation into an AI company exemplifies how Vision 2030 strategic policies enable private sector innovation. Additionally, Saudi Arabia's GPU deployment strategy reflects the scale of infrastructure commitments supporting indigenous AI capability development.
Qatar: Strategic Innovation with Concentrated Investment
Qatar's National AI Strategy, adopted in 2019 and integrated into the Digital Agenda 2030, positions AI as central to economic diversification beyond hydrocarbons. Unlike some regional approaches that distribute AI initiatives across multiple agencies, Qatar has concentrated AI governance in the National Cyber Security Agency (NCSA), which issues comprehensive AI Governance Guidelines covering development, deployment, and oversight. This concentrated approach enables coherent policy implementation and clear accountability, though it risks becoming a bottleneck if the NCSA lacks capacity.
Law No. 13 of 2016 provides the foundational data protection framework, with specific provisions adapted for AI systems. Qatar has committed QAR 2.4 billion in national incentives for AI ecosystem development, targeting 26,000 new ICT jobs. The strategy encompasses research centre establishment (particularly at Qatar Computing Research Institute), talent development programmes spanning university education through professional certification, and sector-specific applications including healthcare, energy, and public services.
The framework specifically addresses AI ethics, bias mitigation, and responsible deployment across sectors. Qatar's approach emphasises that AI governance isn't purely regulatory constraint but active support for responsible innovation. Government incentives support companies conducting bias audits, implementing explainability mechanisms, and establishing algorithmic accountability practices. This carrot-and-stick approach combines regulatory requirements with positive incentives for exceeding minimum compliance.
Qatar has also positioned itself as a bridge between Western and Asian AI development approaches, hosting research collaborations between institutions from different regions. This positioning reflects Qatar's broader strategy of becoming a global innovation hub with particular expertise in bridging geopolitical divides through technology cooperation.
Bahrain: First-Mover Advantage in Comprehensive Legislation
Bahrain has recently advanced its AI governance with the Cloud First Policy (2017), which achieved 85% public sector cloud adoption and created the infrastructure foundation for AI deployment. In July 2025, Bahrain approved a standalone AI Policy establishing principles and governance mechanisms. Most significantly, the Standalone AI Law with 38 Articles was approved by the Shura Council in April 2024, making Bahrain one of the first regional jurisdictions with dedicated AI legislation rather than governing AI through data protection or technology laws.
This 38-article law comprehensively addresses AI system classification (low-risk, high-risk, prohibited), development requirements, deployment approval processes, liability frameworks, and enforcement mechanisms. The law requires developers of high-risk AI systems (those with significant potential to harm public safety or fundamental rights) to conduct impact assessments, establish human oversight mechanisms, and maintain audit trails. Prohibited AI applications include facial recognition for mass surveillance and fully autonomous weaponry, reflecting international trends toward banning certain applications regardless of governance structure.
The Personal Data Protection Law (PDPL), Law No. 30 of 2018, governs data utilisation across AI systems, establishing individual consent requirements and data minimisation principles. Bahrain's commitment to human capital development includes a target to upskill 50,000 citizens in AI-related competencies by 2030 - a substantial programme considering Bahrain's population of approximately 1.7 million. Government transformation initiatives integrate AI across public services (customs, immigration, social services) whilst maintaining transparency and accountability requirements.
Bahrain's comprehensive legislative approach provides a template being evaluated by other regional jurisdictions. Rather than relying on guidelines and voluntary standards, Bahrain has established binding legal requirements with enforcement mechanisms. Early evidence suggests this approach hasn't deterred innovation; rather, it has clarified expectations and enabled companies to confidently invest in AI development knowing the regulatory parameters.
Oman: Vision 2040 and Fourth Industrial Revolution Positioning
Oman Vision 2040 establishes the strategic framework for national development, with digital economy and AI designated as key economic drivers alongside tourism and energy diversification. The National AI Program targets achieving 10% of GDP from digital economy sectors by 2040. The sultanate has invested in developing Oman GPT, a national large language model trained on Arabic and English content reflecting local knowledge and cultural context, supporting indigenous AI ecosystem development and reducing dependence on foreign-developed models.
For related analysis, see: [AI to the Rescue: Mastering Your LinkedIn Profile with ChatG](/business/ai-to-the-rescue-mastering-your-linkedin-profile-with-chatgpt).
The development of Oman GPT specifically addresses a gap in globally available language models: most major LLMs have been trained predominantly on Western data and optimised for English language processing. Oman GPT aims to provide comparable capability for Arabic whilst incorporating local knowledge about Omani geography, history, culture, and institutions. This approach reflects a broader regional recognition that globally-available AI models, whilst useful, cannot fully meet localised needs without adaptation or indigenous alternatives.
Oman has partnered with the World Economic Forum (WEF) to establish a Centre for the Fourth Industrial Revolution, providing research and policy guidance on AI governance aligned with international best practices. This positioning enables Oman to benefit from global expertise whilst adapting frameworks to local context. The Centre conducts research on emerging AI governance challenges, develops best practice recommendations, and convenes government, business, and civil society stakeholders to address shared concerns.
Oman's approach emphasises inclusive development, ensuring AI benefits reach smaller businesses, rural areas, and populations traditionally underrepresented in digital economy participation. Government programmes target small and medium enterprises with AI training, subsidised cloud computing access, and guidance on responsible AI adoption. This inclusive focus distinguishes Oman's approach from some regional jurisdictions that concentrate AI development in major urban centres and large corporations.
Kuwait: Digital Transformation and Strategic Partnerships
Kuwait New 2035 vision incorporates digital transformation as a pillar of national development, with AI identified as critical to achieving modernisation objectives. The Central Information Technology Authority (CITRA) governs data and technology policy under Law No. 37 of 2014. Recent Resolution No. 26 of 2024 establishes new AI governance mechanisms and data utilisation protocols, updating frameworks designed for pre-AI digital systems to address contemporary challenges., as highlighted by OECD AI Policy Observatory
Kuwait has pursued strategic partnership with Microsoft to establish an Azure Region providing cloud computing and AI infrastructure for both government and private sector use. This partnership creates the technical foundation for widespread AI adoption whilst ensuring government oversight and data localisation requirements are met - critical considerations for Kuwait given the sensitivity of government systems and the need to maintain sovereign control over citizen data. The partnership agreement includes provisions for technology transfer and domestic capability development, enabling Kuwaiti technicians to build expertise in cloud and AI infrastructure management.
The Azure Region partnership has specific advantages for Kuwait: it provides access to cutting-edge infrastructure and AI services without requiring independent development of these complex systems. It enables Kuwaiti government to enforce data residency requirements (government data must remain within Kuwait) whilst accessing international-standard cloud services. And it creates economic opportunities for Kuwaiti technology companies and professionals to become Microsoft partners, integrators, and service providers, building a domestic AI services ecosystem.
Egypt: National Scale and Regional Influence
Egypt released the second edition of its National AI Strategy (2025-2030), establishing ambitious targets for AI adoption across government and economy. The strategy reflects lessons learned from the first edition (2020-2025) and responds to evolving global AI landscape and domestic economic priorities. The National Council for Artificial Intelligence (NCAI) coordinates implementation, working alongside the Information Technology Industry Development Agency (ITIDA), which provides sector development support, tax incentives, and regulatory relief for technology companies.
The Competitiveness Assessment Framework (CAF) with 89 indicators provides mechanisms for evaluating AI competitiveness across sectors and regions, enabling data-driven policy adjustments and targeting development support where most needed. This framework evaluates factors including research capacity, infrastructure maturity, talent availability, regulatory environment, and market opportunity. The CAF enables Egypt to identify lagging sectors (perhaps AI adoption in agriculture) and concentrate support accordingly.
Egypt is also drafting comprehensive AI Legislation expected to be tabled for parliamentary consideration, covering development standards, deployment requirements, and liability frameworks. The legislation is being developed through broad stakeholder consultation including government, business, civil society, and international partners, aiming to produce balanced frameworks that encourage innovation whilst protecting public interests. Egypt's scale (population exceeding 100 million) means AI governance decisions have regional significance, influencing how other countries approach comparable challenges.
The strategy emphasises AI's role in addressing national challenges: healthcare AI for improving disease diagnosis and treatment in underserved regions; agricultural AI for optimising water use and crop yields in an increasingly water-scarce country; education AI for personalised learning in a country with substantial educational access challenges; and infrastructure AI for optimising transport networks and energy systems. This application-focused approach to AI strategy reflects Egypt's development priorities.
Jordan: Ethical Framework and Implementation Scale
Jordan adopted an AI Strategy (2023-2027) establishing goals for digital economy growth and public service transformation. The Ministry of Digital Economy and Entrepreneurship (MoDEE) oversees implementation of approximately 68 targeted projects integrating AI across government functions (healthcare, education, social services, customs, revenue administration). This portfolio approach enables Jordan to build AI deployment expertise across diverse applications whilst maintaining strategic coherence.
For related analysis, see: [Opinion: Saudi Arabia's AI Dominance](/voices/opinion-saudi-arabia-ai-dominance-strategic-approach).
The National Charter of Ethics for AI establishes principles guiding development and deployment decisions, addressing algorithmic transparency, bias prevention, human dignity, and democratic accountability. Unlike purely regulatory approaches, the Charter emphasises ethical principles and stakeholder responsibility. It encourages companies and government agencies to internalise ethical considerations rather than merely complying with minimum legal requirements. Regular reviews of the Charter enable updates reflecting emerging challenges and evolving understanding of AI ethics.
Jordan's Personal Data Protection Law (PDPL) 2023 governs personal information handling in AI systems, establishing individual rights to data access, correction, and deletion. The strategy addresses digital skills development through university programmes and professional training, startup ecosystem support through innovation funds and regulatory relief, and research capacity building through partnerships with academic institutions and international technology partners. Jordan's positioning as a regional technology hub (particularly for software development services) means AI governance frameworks directly influence the country's economic competitiveness.
Morocco: Digital Transformation and Regional Leadership
Morocco's Digital Morocco 2030 strategy positions digital economy and AI innovation as central to economic modernisation, employment creation, and social development. The National Commission for Data Protection (CNDP) operates under Law No. 09-08 of 2009 and is developing enhanced AI-specific governance mechanisms. In April 2024, Morocco proposed a bill establishing a National Agency for AI Governance, which would provide dedicated oversight for AI development and deployment - reflecting recognition that data protection authorities alone cannot adequately address AI governance complexity.
The strategy targets 240,000 new digital jobs and 3,000 AI-focused startups by 2030 - ambitious targets reflecting Morocco's recognition of technology's role in employment creation and poverty reduction. Morocco is establishing digital innovation hubs and technology centres in major cities and regions to cultivate local AI expertise. The governance framework emphasises inclusivity, ensuring AI benefits are broadly distributed across regions and sectors rather than concentrated in Casablanca and other major centres.
Morocco's regional positioning as a bridge between Europe and Africa influences AI governance priorities. The country serves as a technology hub for North African companies, attracting talent and investment. Governance frameworks balance European-influenced standards (particularly data protection norms given Morocco's European trade relationships) with African development priorities and local preferences. This bridging role positions Morocco as a potential regional leader in AI governance best practices applicable to African countries seeking to develop indigenous AI capabilities.
Bilateral and Multilateral Strategic Frameworks
Bilateral AI partnerships amplify regional governance effectiveness and investment capacity. The US-UAE AI Acceleration Partnership, established in May 2025, represents a major commitment to joint AI development and deployment. The agreement includes establishment of a 5 Gigawatt AI Compute Campus dedicated to training and deploying advanced AI models. This infrastructure enables both countries' researchers and companies to develop, train, and deploy state-of-the-art AI systems. The UAE has committed USD 1.4 trillion in investment across US-based companies and infrastructure, significantly amplifying the region's AI computational capacity and creating sustained demand for American technology and expertise.
Saudi Arabia has negotiated major partnerships with global technology leaders, with Google, Oracle, and AMD collectively investing USD 80 billion in AI infrastructure, research centres, and capability development in Saudi Arabia. These investments align with Saudi Arabia's National Strategy for Data and AI and support Vision 2030 economic diversification objectives. The scale of these partnerships reflects investor confidence in Saudi Arabia's market opportunity and governance framework stability.
The Abraham Accords technology cooperation framework, whilst primarily focused on normalisation between Arab states and Israel, includes provisions for AI research collaboration and technology transfer. These provisions enable participating countries to benefit from Israeli AI expertise and research partnerships. Collaborative projects in healthcare AI, agriculture optimisation, and cybersecurity represent early manifestations of this framework. The technology cooperation dimension demonstrates how diplomatic normalisation creates AI governance opportunities.
GCC states have jointly developed the GCC Guiding Manual on AI Ethics, establishing shared principles for responsible AI governance across member states. This multilateral approach facilitates policy harmonisation, reduces compliance burden for cross-border AI companies (those operating across multiple GCC jurisdictions need not navigate entirely different regulatory frameworks), and amplifies the region's collective influence on global AI governance standards. The manual addresses algorithmic transparency, bias mitigation, human-centred design, accountability mechanisms, and cultural alignment with Islamic principles.
Comparative Governance Overview and Analysis
| Country | National Strategy | Lead Agency | Data Protection Law | Standalone AI Legislation | Key Initiative |
|---|---|---|---|---|---|
| UAE | National AI Strategy 2031 | AI Office, AIATC | ADGM Framework | Law No. 3 of 2024 | AED 335B growth target |
| Saudi Arabia | NSDAI (Vision 2030) | SDAIA | PDPL (Sept 2024) | Under NSDAI | 1.5GW data centre capacity |
| Qatar | National AI Strategy 2019 | NCSA | Law No. 13 of 2016 | Under NCSA Guidelines | QAR 2.4B incentive package |
| Bahrain | Cloud First Policy (2017) | Relevant Ministries | Law No. 30 of 2018 | 38-Article Law (April 2024) | 50,000 AI upskilling target |
| Oman | Vision 2040 | Relevant Ministries | Draft Framework | Under Development | Oman GPT national model |
| Kuwait | New Kuwait 2035 | CITRA | Law No. 37 of 2014 | Resolution No. 26 of 2024 | Microsoft Azure Region |
| Egypt | National AI Strategy (2025-2030) | NCAI, ITIDA | Data Protection Framework | Draft AI Law | CAF with 89 indicators |
| Jordan | AI Strategy 2023-2027 | MoDEE | PDPL 2023 | Under Strategy | 68 targeted projects |
| Morocco | Digital Morocco 2030 | CNDP (proposed Agency) | Law No. 09-08 of 2009 | Proposed (April 2024) | 240,000 jobs, 3,000 startups |
The comparative analysis reveals three distinct governance approaches emerging across the region:
Innovation-First Framework (UAE, Qatar): These jurisdictions emphasise minimal regulatory barriers, relying on ethical guidelines, industry standards, and soft law mechanisms rather than rigid legal requirements. This approach attracts foreign AI companies and talent, creates space for experimentation, and enables rapid adaptation as technology evolves. The tradeoff is potentially less accountability and oversight until problems emerge.
Comprehensive Legal Framework (Bahrain, Saudi Arabia): These jurisdictions are establishing detailed AI legislation, data protection laws with substantial penalties, and structured approval processes for high-risk AI systems. This approach provides clarity, accountability, and mechanisms for holding actors responsible for harms. The tradeoff is potentially higher compliance costs that may deter smaller companies and require sophisticated legal and compliance functions.
Adaptive-Development Framework (Egypt, Jordan, Morocco, Oman, Kuwait): These jurisdictions are developing national strategies and governance mechanisms appropriate to their development stage, infrastructure maturity, and institutional capacity. They often blend voluntary standards, regulatory requirements, and capability development support. This approach reflects pragmatic assessment of what governance mechanisms can realistically be implemented and enforced given institutional constraints.
The Scout View: AI in Arabia
THE AI IN ARABIA VIEW
MENA's AI governance is evolving from fragmented initiatives to comprehensive, interconnected frameworks. The region has moved beyond asking "whether" to govern AI and now focuses on "how" to govern intelligently. Unlike Western governance models that often emerge reactively after innovation creates problems, MENA jurisdictions are building proactive frameworks that anticipate challenges whilst encouraging beneficial innovation. This intentional approach, combined with substantial capital investment and strategic bilateral partnerships, positions the region to become a significant centre for responsible AI development and deployment.
Critical advantages position MENA favourably: capital availability, demonstrated technology implementation capability, regional economic integration mechanisms (GCC framework), large population base representing significant market opportunity, and strategic geographic positioning bridging Europe, Asia, and Africa. Critical challenges include regulatory fragmentation across jurisdictions (companies must navigate different frameworks in different countries), talent competition as global firms recruit scarce AI expertise, and the need for substantial continued infrastructure investment to match ambitions.
The next 12-24 months will prove critical. Bahrain's standalone AI legislation will be operationalised and refined based on practical experience. Egypt's draft AI law will advance through parliamentary consideration, potentially setting precedent for other major developing economies. Saudi Arabia's infrastructure investments will begin producing tangible capabilities and should attract significant private sector investment. UAE's AI campus will commence operations and demonstrate whether such mega-projects can deliver promised capabilities. These developments will reveal whether MENA's governance frameworks prove sufficient to support world-class AI ecosystems or require substantial refinement.
Frequently Asked Questions on MENA AI Governance
What is the primary difference between UAE and Saudi Arabia's AI governance approaches?
The UAE emphasises a lighter-touch regulatory framework that encourages innovation whilst ensuring ethical standards through guidelines and codes of conduct. The approach relies heavily on industry self-regulation, voluntary standards, and reputational incentives. Saudi Arabia integrates AI governance more directly into Vision 2030 economic planning and establishes more prescriptive regulatory requirements, particularly through the Personal Data Protection Law with substantial fines. Both approaches aim to balance innovation and oversight, but through different mechanisms. UAE's approach optimises for speed and attracting foreign investment; Saudi Arabia's approach optimises for accountability and ensuring alignment with national priorities.
Which MENA country has the most comprehensive standalone AI legislation?
Bahrain currently leads regional jurisdictions with its 38-article standalone AI Law approved by the Shura Council in April 2024. This legislation specifically addresses AI system classification (low-risk, high-risk, prohibited), development requirements, deployment approval processes, liability frameworks, and enforcement mechanisms. It establishes clear legal status for AI governance rather than governing AI through data protection or technology laws. Other jurisdictions including Egypt are developing comparable legislation, and Morocco has proposed creating a dedicated National Agency for AI Governance, but Bahrain's legislation is currently the most comprehensive standalone framework in the region.
How do bilateral US partnerships affect regional AI governance?
Bilateral partnerships with the United States, particularly the US-UAE AI Acceleration Partnership and Saudi Arabia's arrangements with Google, Oracle, and AMD, provide substantial capital investment (USD 1.4 trillion in UAE commitments; USD 80 billion in Saudi commitments) and technology transfer. These partnerships simultaneously influence governance frameworks as international standards and best practices are incorporated into regional policymaking. American investment conditions may include requirements for data protection, cybersecurity standards, and transparency mechanisms aligned with US preferences. This creates incentives for recipient countries to harmonise governance with American norms, though countries carefully balance this with preserving sovereign regulatory authority.
What is the role of the GCC Guiding Manual on AI Ethics?
The manual establishes shared ethical principles across GCC member states (UAE, Saudi Arabia, Qatar, Bahrain, Kuwait, Oman), facilitating governance harmonisation and reducing compliance burden for companies operating across multiple jurisdictions. It addresses responsible development, bias mitigation, transparency, accountability, and human-centric AI principles applicable across sectors and borders. The manual is non-binding soft law, meaning jurisdictions retain authority to establish stricter requirements. However, it creates a floor of shared expectations and demonstrates regional cooperation on governance issues.
How do MENA data protection laws relate to AI governance?
Data protection laws (such as Saudi Arabia's PDPL, Bahrain's Law No. 30 of 2018, and Jordan's PDPL 2023) form the foundational layer of AI governance by regulating how personal information is collected, processed, and utilised in AI systems. These laws establish compliance obligations, enforcement mechanisms, and penalty structures applicable to all AI systems handling personal data. Most MENA AI governance frameworks intentionally layer AI-specific requirements on top of data protection foundations rather than replacing them. This approach avoids redundancy but requires companies to comply with both data protection requirements and AI-specific obligations.
What is the timeline for implementation of proposed legislation?
Egypt's draft AI law is expected for parliamentary consideration within the 2025-2026 legislative session, potentially becoming effective in 2026 or 2027. Morocco's proposed National Agency for AI Governance bill was advanced in April 2024 and is moving through the legislative process. Bahrain's standalone AI Law is being operationalised following Shura Council approval, with regulatory guidance being developed. Most jurisdictions are implementing strategies through existing agency structures (like Saudi Arabia's SDAIA) whilst simultaneously developing dedicated legislation. This dual approach maintains governance activity whilst legislative processes proceed, which can be lengthy in many regional jurisdictions.
How does MENA's AI governance compare to international standards?
MENA governance frameworks increasingly align with international standards including ISO 42001 (adopted in Saudi Arabia), GDPR-inspired data protection models, and UNESCO AI ethics recommendations. Regional frameworks also incorporate local considerations such as Islamic principles, Arabic language requirements for AI systems, and development priorities that may differ from Western-origin standards. For instance, while data protection is universal, MENA frameworks may place additional emphasis on religious compliance (ensuring AI systems respect Islamic principles) or regional economic development (ensuring AI benefits local SMEs and emerging sectors). This combination of international standards adoption plus local adaptation represents a mature approach to governance.
Drop your take in the comments below.