Why the Fine Number Won’t Help You Plan

The ceiling exists in law, enforcement of it doesn’t

The law sets a fine ceiling, up to SAR 5M per violation, doubled for repeat offenses. But SDAIA has never publicly confirmed any actual case collected at that ceiling. Decisions are published only as violation categories, without amounts or entity names, unlike some other regulators that publish detailed, named decisions.

Why that changes how you should plan

You can’t calculate your exposure from a number that’s never disclosed. What you can calculate is audit likelihood, multiplied by the cost of each gap if it’s found, multiplied by the time it takes to close it. That’s real operational planning, not guessing at a fine figure you’ll never actually see.