The Investment Law issued under Royal Decree M/19 came into force in February 2025 and repealed the Foreign Investment Law that had governed entry into the Saudi market for roughly two decades. A year and a half of practice later, it is clear which parts of it matter to someone actually setting up.
The philosophical change, stated plainly
The old regime asked permission. You applied for a foreign investment licence, MISA assessed you, and you waited. The new regime asks you to register. You confirm your activity is open, you register, and supervision happens afterwards.
That is a move from prior permission to open entry with subsequent oversight, and it changes the shape of a setup timetable. Entry is now measured in days rather than weeks for straightforward activities.
Equal treatment is the substantive part
The law establishes equality of rights and obligations between domestic and foreign investors, subject only to a published list of excluded or restricted activities. Before, a foreign investor operated under a separate statute with its own conditions. Now the default is the same rulebook, and the exceptions are the thing you check rather than the norm you work around.
In practice this means the first question in any setup conversation has changed. It used to be can a foreigner do this at all? It is now is this activity on the excluded list, and if not, what does the sector regulator require of anyone doing it?
What the law guarantees
Four protections are worth knowing because they answer the questions investors' boards actually ask:
- Against expropriation. Property may not be confiscated or expropriated except for a public purpose, by judicial ruling, and against fair compensation.
- Free transfer of funds. Profits and liquidation proceeds may be transferred out without delay, in any currency.
- Intellectual property and trade secrets receive explicit protection.
- Regulatory stability. Positions lawfully acquired are shielded from retroactive change.
Administrative decisions must be reasoned in writing and can be appealed within defined timelines, with recourse to the Board of Grievances. That last point is unglamorous and matters enormously: a refusal you can read is a refusal you can answer.
The four steps, in the order they actually happen
1. Confirm the activity. Check it against the excluded list and against what the sector regulator requires. This is the step that determines everything after it, and it is the one people skip.
2. Register with the Ministry of Investment. Electronic, and quick when the activity is clean and the documents are attested correctly. Most delays we see at this stage are attestation problems on foreign corporate documents, not assessment problems.
3. Incorporate the entity. Commercial Registration, articles of association, and the Ministry of Commerce formalities.
4. Operational registrations. Tax with ZATCA, social insurance with GOSI, the labour file, the municipality licence, the national address, the bank account.
Step four is where timetables really slip, and it is nothing to do with the Investment Law. A bank account, in particular, runs on the bank's own compliance calendar and not on yours.
What has not changed
The law liberalised entry. It did not remove sector licensing, Saudization, the requirement to have a real address and a real operation, or any of the tax and labour obligations that follow. A registration is the beginning of the obligations, not the end of them.
Nor did it remove the excluded activities list. It is shorter than it was and it moves; check it against the current published version rather than against a summary written last year — including this one.
The honest advice
If you are entering Saudi Arabia now, the entry itself is the easy part, and that is new. Budget your attention for what comes after: the sector regulator, the Saudization band you will land in, the bank, and the first VAT return. Those are where foreign entrants get caught, and none of them are visible from the registration screen.
We handle all four steps and everything after them from one file. If you want to know what your specific activity requires before you commit to anything, tell us the activity and the ownership structure and we will tell you the real path — including if the honest answer is that a different structure would serve you better.
This article describes the framework as it stood when written. Excluded activities and sector requirements change; confirm your position before acting.
Question about this?
Call us and we will answer directly, with no obligation.