File0001
Para. 8.4Status unknownSaudi ArabiaRegulation
Issued by Saudi Data & AI Authority / NDMO
Report the Incident
Deepfakes Guidelines: Mitigating risks while fostering innovation
Reporting the Incident to Local Authorities: After reporting the deepfake to the platform, victims
should also notify relevant local authorities to ensure further action. This can for example be done by sub
mitting a complaint via the Kollona Amn (كلنا أمن) app, which directly connects users to law enforcement.
Additionally, victims should report the incident to the Cybercrime Unit within the Ministry of Interior through
their online portal or by visiting a police station. For cases involving financial fraud or identity theft, report
ing to the Saudi Central Bank’s e-service and their bank is crucial to prevent further damage and initiate
protective measures.
Seeking Legal Advice: It is essential to consult with a lawyer experienced in digital rights and data
protection laws. Victims should engage a legal professional to guide the process, providing them with all
evidence and legal bases to prepare for both civil and criminal proceedings.
Employing Digital Forensics: Engaging digital forensics experts to trace the origins of the deepfake
and utilizing AI detection tools is advisable. It is also recommended to contract a reputable digital forensics
firm to analyze the deepfake content, ensuring the findings are documented and can be effectively used.
Enhancing Personal Security: Victims are advised to implement enhanced security protocols across
all digital platforms and consider subscribing to monitoring services to safeguard against further misuse of
personal data. Strengthening privacy settings on all online accounts, enabling two-factor authentication,
and regularly monitoring for further incidents are critical steps.
Refer to Overarching Laws: This document provides guidance on the development, use, and con
sumption of deepfakes. It is important to note that where laws or administrative regulations apply, those
provisions should take precedence. As such, leveraging the PDPL, Anti-Cyber Crime Law, and Criminal
Code is essential for addressing deepfake incidents. Victims should work with their lawyer to develop a
comprehensive legal strategy that references these specific laws to pursue all available legal options in
response to the deepfake incident.
Article15 of the Anti-Cyber Crime Law stipulates that the Bureau of Investigation and Public Prosecution is responsible for investigating
cybercrimes. Article 14 of the Anti-Cyber Crime Law stipulates that CST shall provide assistance and technical support to competent
security agencies during the investigation stages of cybercrimes.
Deepfakes Guidelines: Mitigating risks while fostering innovation
To minimize the risks associated with deepfakes, individuals and organizations can adopt sev
eral best practices:
Limiting Personal Data Exposure Online: Reduce the amount of personal data and images
shared on social media and other public platforms to limit the raw material available for creating
deepfakes. Avoid posting high-resolution images and personal videos that can be exploited for
malicious purposes.
Educating the Public on Deepfake Risks: Raise awareness about the existence and dangers
of deepfakes. Inform people on how to recognize and respond to suspicious content. Public
education campaigns can include workshops, online resources, and collaboration with media
outlets to disseminate information about deepfakes.
Learning About Deepfake Characteristics: For individuals, it is crucial to learn more about
the characteristics of deepfakes. Understanding the typical signs of deepfake content, such as
unnatural facial movements, irregularities in lighting and shadows, and inconsistencies in audio,
can help in identifying and questioning the authenticity of such media. Staying informed through
reputable sources and utilizing available tools to analyze and verify content can significantly
reduce the impact of deepfake threats.
Implementing Robust Verification Processes: For organizations, especially those in media
and communication, implementing strict verification processes for the content they disseminate
can help ensure authenticity. This includes using AI detection tools as well as manual verification
methods by trained professionals. These verification processes could include:
Using AI Tools and Checking Metadata: Utilize advanced AI tools to analyze videos and
images for signs of manipulation. Additionally, check the metadata of digital content, which
provides information about the creation date, editing history, and software used, helping to
verify if the content has been tampered with.
The Arabic text is the legally binding version. The English translation is provided for guidance only.
Freshness not yet recorded