Data embassies and US embargo halt give Saudi AI hope
Gulf autocracy gets access to powerful AI chips subject to export ban and pursues legal reforms to make foreign computing firms feel comfortable about putting their data there
Saudi Arabia’s (KSA’s) attempt to turn from one of the least to most developed data markets in the world has advanced with measures it and the US have taken to encourage investors to build artificial intelligence (AI) datacentres in the country.
KSA came closer to finalising plans to treat foreign computer systems as “data embassies”, reassuring firms their customer data would be safely stored in the authoritarian Gulf monarchy. Meanwhile, the US scrapped export controls on its most advanced AI chips, which had threatened to stop KSA from ever realising its plan to become a global leader in AI.
Those legal preparations bore fruit this week before either was actually enacted, when Nvidia, whose advanced AI chips are the subject of US export controls, said it had done a deal to ship 18,000 of them to the Saudi state-owned Public Investment Fund. The chips were the first stage in a plan to install “several hundred thousand” Nvidia Grace Blackwell AI chips in five years, consuming 500MW of energy.
Political analysts and industry insiders said, before KSA’s plans unfurled this week, that its proposed Global AI Hub Law would allow KSA to get banned AI chips that both it and foreign firms would need to build AI systems in the country. The draft law offers to give foreign computer systems embassy status, so their operators answered only to the laws of their home nations. It would forbid the Saudi state from intruding.
KSA concluded a public consultation on the law the day after an Investment Summit, at which US president Donald Trump and Saudi crown prince Mohammed bin Salman Al Saud signed a broad economic partnership and presided over $600bn of trade deals, the White House said in a statement. They had done $300bn of deals when the conference opened, and aspired to $1tn, the prince told the conference on Tuesday. The deals encompassed defence, energy, tech and health.
The audacity of KSA’s ambition was made apparent by data that in February, according to Computer Weekly analysis, showed how among 20 of the most notable data markets in Europe, the Middle East and Africa (EMEA), Saudi capital Riyadh had the second-least of all operational, planned and unfinished datacentres, above only Athens.
With 125MW of computing capacity then planned in Riyadh, it was barely 5% of the forecast size of EMEA market leader London, and not 15% of the size of its rival and neighbour, the United Arab Emirates, according to numbers published by commercial estate agent Cushman & Wakefield. The largest datacentre investment deal apparent, among those announced at the Forum, was Saudi firm DataVolt, investing $20bn in the US.
On Monday, the US scrapped the AI Diffusion Rule, by which former president Joe Biden had blocked exports of powerful AI chips to all but a handful of countries because, US AI tzar David Sacks told the conference, it stopped US technology proliferating around the world and stifled strategic partners such as KSA, when it was supposed to hinder AI development in only a few countries.
The US had decided instead to model AI policy on Silicon Valley’s software ecosystems, where firms became dominant by publishing application programming interfaces (APIs) that others could use to build on their technology.
“They’re able to build these ecosystems without even having any lawyers involved,” said Sacks. “There’s no need for a contract. You just publish an API. In a similar way, the US needs to encourage the world to build on our tech stack.
“President Trump said ‘the US has to win the AI race’. How do we win the AI race? We have to build the biggest partner ecosystem. We need our friends like the Kingdom of Saudi Arabia, and other strategic partners and allies, to build on our tech.
“We want our technology to spread,” he said. “We want people to use it. We want to become the standard.”
Data sovereignty
KSA’s attempt, meanwhile, to encourage foreign firms to build AI datacentres in the country by allowing their home nations to retain sovereignty over their data was widely commended as a strategic masterstroke.
“It’s still an immature market, but the opportunity is huge,” said Stephen Beard, a real estate deal-maker for Knight Frank in Dubai. KSA could be a top-seven datacentre market in a decade. His firm estimated US cloud computing firms had recently committed to $9bn of investment there by 2027.
Knight Frank alone was handling $7bn of datacentre deals for firms attracted by the local market opportunity, in a country with 20% lower power costs than the UK, a large, growing population and a non-democratic government able to digitise rapidly without the inconvenience of parliamentary process. President Trump commended KSA’s ruling family for that in a speech in Riyadh this week.
“The AI Hub law is optically a fantastic move,” said Beard. “It should go some way to appeasing investors’ concerns. But we are talking about Saudi Arabia. Who decides the law in Saudi Arabia? Any developer looks for a higher return because of the macro risks.”
But computer firms would invest there to serve KSA. The idea of KSA becoming a “super-hub” was flawed.
Munir Suboh, a lawyer at Taylor Wessing in Riyadh, said the law would give KSA an “unprecedented advantage” over other countries which hesitate to cede sovereignty over foreign facilities. Contrast Saudi Arabia’s attempt to make life easier for foreign investors with Europe’s regulatory preoccupation with imposing safety standards.
“Traditionally, cross-border data transfers require compliance with multiple data localisation regulations, especially in data-heavy industries,” said Oliver Subhedar, a commercial dispute lawyer with Burlingtons. KSA is seeking a comparative advantage over other states by regulating datacentres themselves.”
Risk and compliance costs
KSA would slash the cost of risk and compliance for multinationals that ordinarily had to accommodate a host of different regulations around the world, said Jade Masri, managing director of investment advisory R Consultancy in Dubai. That would cut capital costs for investors.
“Hyperscalers need this law to import data into KSA to run large language models and generate meaningful AI,” said Amrik Sangha, a consultant with Gateley in Dubai.
But KSA needed to address the question of “grey” fibre optic cables that would carry foreign data transfers “without monitoring”, he said. Grey, or “dark”, cables are private, point-to-point communications lines not reliant on local connections.
Notwithstanding the unexpected US U-turn, Juliana Rordorf, Middle East director for political consultancy Albright Stonebridge Group, said the law might influence the global debate about data localisation, as well as AI export controls.
Neighbouring Bahrain has had a data embassy law since 2018, while UAE, whose datacentre market and planned construction dwarfs that of KSA, recently made bilateral data embassy agreements with France and Italy.
Such a law has even been mooted as a way to encourage investors deterred by Europe’s onerous data protection rules, having been pioneered in Estonia, and aped in Monaco, as a means of securing government backup datacentres in Luxembourg, because they otherwise had nowhere to put them safely.
