Dubai, UAE · SRA Regulated

Entering Saudi Arabia in 2026: What the Legal Landscape Actually Looks Like

Saudi Arabia has undergone one of the most dramatic regulatory transformations in modern economic history. Since the launch of Vision 2030 in 2016, the Kingdom has enacted more than 2,200 legislative and regulatory reforms, reshaping virtually every aspect of the business environment. As of 2026, the programme has entered its third and final phase, with 93% of its key performance indicators having met or exceeded their targets. The opportunity is real. But so is the complexity — and businesses that arrive expecting a straightforward market entry are often in for a surprise.

Having spent years leading legal and regulatory affairs across the region — including direct involvement in localization projects in Saudi Arabia, engagement with MOHAP and RAFED, and participation in the Qatar National Medicines Security Strategy — I have seen both what works and what gets companies into difficulty. This article sets out the most important things to understand before you commit.

The reforms are genuine — but the administrative reality is nuanced

The headline changes are well-documented. 100% foreign ownership is now permitted in most sectors, replacing the longstanding requirement for a Saudi partner. The Ministry of Investment (MISA, formerly SAGIA) has streamlined the licensing process, cutting business setup time by more than 54% compared to pre-reform timelines. The Companies Law of 2022 introduced modern corporate structures aligned with international standards. A new bankruptcy law, enacted in 2018, provides creditor protections that were previously absent. The Updated Investment Law of 2025 goes further, enshrining equal treatment of local and foreign investors and expanding dispute resolution options.

These are meaningful changes, and they have worked. By end of 2025, Saudi Arabia's economy had surpassed the $1 trillion mark for the first time, expanding 80% since Vision 2030's launch. The IMF projects growth of 3.1% in 2026 and 4.5% in 2027. Non-oil exports are at record levels. This is not a story of failed ambition — it is a genuine transformation.

The nuance is that the administrative machinery has not always kept pace with the legislative ambition. Approvals that should take weeks can take months. Regulatory guidance in some sectors remains incomplete. And the pace of change itself creates uncertainty — rules that applied last year may not apply today, and those that apply today may not apply next year. This is not a reason to stay out. It is a reason to enter with proper preparation and local awareness.

The question for foreign businesses in 2026 is no longer whether to enter Saudi Arabia — it is how to do so without the structural mistakes that become expensive to fix later.

The RHQ requirement is the single most consequential structural decision

If your business intends to contract with Saudi government entities — and the Saudi government is one of the largest buyers in the region, with annual government spending projected to exceed $300 billion — then the Regional Headquarters (RHQ) requirement is not optional. Since January 1, 2024, multinational companies without a licensed RHQ in the Kingdom are effectively barred from public procurement. The policy has had a significant pull effect: by early 2026, more than 700 multinational companies had established RHQs in Riyadh, well ahead of the original target of 480 by 2030.

The incentives for RHQ establishment are substantial. Qualifying entities receive zero corporate income tax and withholding tax for 30 years on RHQ activities, a 10-year exemption from Saudization requirements, and unlimited visa issuance for RHQ employees. To qualify, a company must maintain at least 15 full-time employees within the first year, including three C-suite executives, and must commence operations within six months of licence issuance.

Exemptions to the procurement restriction do exist — introduced formally in 2026 — but they are narrow and process-intensive. A government entity can contract with a non-RHQ company if only one technically compliant bid is received, or if a non-RHQ bid is technically superior and at least 25% lower in price than the next best offer. Contracts below SAR 1 million (approximately US$267,000) are also exempt. These carve-outs exist for genuine operational reasons, not as a reliable alternative to RHQ establishment for companies with serious government-facing ambitions.

Entity structure choices have long-term consequences

Choosing between a Limited Liability Company, a branch of a foreign company, or a representative office is not merely a procedural question — it has direct implications for tax treatment, commercial flexibility, Saudization obligations, and your ability to bid on contracts. The wrong choice at the outset can create significant restructuring costs and operational disruption later.

For most foreign businesses entering with commercial intent, an LLC provides the cleanest structure: liability protection, commercial flexibility, and the ability to operate across sectors. A branch office carries the unlimited liability of the parent entity and is more appropriate for specific project-based mandates. A representative office cannot conduct commercial activities at all and is limited to liaison and promotional functions. The RHQ licence, by design, cannot conduct commercial operations — it serves as a strategic management hub only, with commercial activities requiring separate MISA-licensed affiliates.

Saudization is real and its compliance requirements evolve

The Nitaqat system — which requires private sector employers to meet quotas for Saudi national employees, calibrated by company size and sector — has become progressively more stringent. The 2025 amendments to the Labour Law introduced additional employee accommodation and transportation requirements alongside the existing workforce composition rules. Female labour force participation has roughly doubled since 2017, from approximately 17% to 34%, supported by national programmes and regulatory changes that have meaningfully expanded the hiring pool.

Non-compliant companies face restrictions on visa issuance, government service access, and can be placed in a "red" Nitaqat category that effectively prevents normal operations. Saudization compliance needs to be built into your operational model from day one, not retrofitted after you have built a team.

Data protection, sector regulation, and Shariah considerations

The Personal Data Protection Law (PDPL), enacted in 2021 and overseen by SDAIA, introduced data subject rights, corporate compliance obligations, and cross-border data transfer restrictions that bring Saudi Arabia broadly in line with global standards. Businesses processing personal data of Saudi residents need to assess their data flows and compliance posture before launch, not after.

Sector-specific regulation adds further layers. Healthcare, pharmaceuticals, financial services, and food and beverage each have their own licensing bodies, product approval processes, and market access requirements. Companies in regulated sectors should expect their Saudi market entry to have a material regulatory component that runs in parallel with, and sometimes ahead of, commercial setup.

Finally, the role of Shariah in the legal system should not be underestimated. Saudi courts apply Islamic law principles, and commercial contracts that are enforceable in Dubai or London may be interpreted differently in Riyadh. Interest provisions, penalty clauses, and certain IP arrangements require particular care in drafting for a Saudi context.

What experienced entrants do differently

Companies that navigate Saudi market entry well tend to share a few common characteristics. They invest in local advisory support from the outset rather than relying solely on their own legal teams who may not have in-country experience. They engage with MISA early and understand the sector-specific licensing requirements before they are locked into a structure. They build their Saudization compliance plan before they build their team. And they treat the RHQ question as a strategic decision to be made at board level, not a compliance checkbox to be delegated.

The opportunity in Saudi Arabia in 2026 is significant and the reforms are real. But entry without preparation remains expensive. The companies that succeed are the ones that understand the regulatory environment as clearly as they understand the commercial opportunity.

Anthony Michael Letayf

Anthony Michael Letayf

Senior legal and commercial adviser based in Dubai with 16+ years of experience across MENA and emerging markets. Formerly Group General Counsel of NMC Healthcare and Head of Legal at Viatris, with direct experience of Saudi market entry, entity establishment and regulatory engagement. Full bio →

Disclaimer: This article is for general informational purposes only and does not constitute legal advice. It does not create a solicitor-client relationship. Anthony Letayf is qualified in England and Wales only. Readers should seek specific professional advice in relation to their circumstances. Full disclaimer →