A Quiet but Decisive Policy Shift in the Gulf
On April 30, 2026, Meta rendered the Facebook accounts of ALQST for Human Rights, Democratic Diwan, Saudi researcher Abdullah Alaoudh, and human-rights defender Yahya Assiri "unavailable" to users inside Saudi Arabia, with mirrored restrictions extending to a UAE-based academic. The decision became public on May 20, 2026, when Access Now and eleven partner organisations — including the Electronic Frontier Foundation, MENA Rights Group, and the Gulf Centre for Human Rights — issued a joint statement condemning the geo-blocks.
The pattern is broader than the named individuals. Citing Meta's own content-restriction case studies, the signatories note that "over 100 Facebook pages and Instagram accounts" have been geo-restricted in Saudi Arabia since March 2026, while X (formerly Twitter) "had not complied" with parallel Saudi requests as of publication.
The Strongest Case for Meta's Compliance
Critics will reach for "complicit" before "constrained." That misreads the structural pressure. Meta's Transparency Center is unusually candid about why the company restricted 92 items in one April 2026 Saudi case and 16 items in another: "the risks of not complying with the request included financial penalties and, to a lesser extent, blocking risk and potential criminal liability." Saudi Arabia's Communications, Space and Technology Commission (CST) has the formal authority to throttle apps, block traffic at the gateway, and refer non-compliant operators to a public prosecutor under Article 6 of the 2007 Anti-Cybercrime Law, which carries up to five years' imprisonment and a fine of up to 3 million riyals for content "impinging on public order, religious values, public morals, or privacy." Local staff are exposed; in-country revenue and the installed user base are exposed.
On its face, Meta is doing what contemporary intermediary-liability rules ask of a platform: it narrowly tailored a country-level restriction rather than a global takedown, preserved the accounts everywhere else, and disclosed the action in a transparency report. The signatory NGOs themselves concede that Meta "conducted legal assessments beforehand and 'took into account human rights implications.'"
Why "Lawful Compliance" Still Hollows the Internet
The steelman survives only so long as the underlying statute is itself legitimate. Article 6 is not. As the UNODC SHERLOC legal database records and the WIPO Lex archive confirms, the operative phrases — "public order," "religious values," "public morals" — are textbook examples of overbroad criminal-speech offences that UN human-rights mechanisms have flagged as incompatible with Article 19 of the ICCPR. Meta is not honouring a narrowly drawn data-localisation rule or a court order targeting a specific defamation. It is enforcing a content-based criminal statute that fails any recognised proportionality test, against accounts whose alleged offence is, in Meta's own description, "reporting on regional geo-political conflicts, security developments," and political satire.
That distinction matters for the long-run design of the open internet. Geo-IP segmentation has, until now, been a useful compatibility layer: it let platforms honour clearly drawn local rules — German hate-speech law, French Holocaust-denial bans, Indian intermediary orders pursued through judicial process — without fragmenting the global service. When the same compliance plumbing is grafted onto vague morals-and-public-order offences, the result is not localisation. It is the de facto export of the most restrictive jurisdiction's speech regime to its diaspora and to anyone trying to research it.
The X Counter-Example
X's reported non-compliance with parallel Saudi geo-block requests is a useful natural experiment. The platform has not been pulled from Saudi networks; senior employees have not, to public knowledge, been arrested. That suggests there is more legal headroom for resistance than Meta's risk model implies — and that compliance is, at the margin, a choice between disclosed cost categories rather than a binary survival question.
The Proportionate Response
The answer is not to demand that Meta defy every Gulf order. It is to ask platforms operating in jurisdictions with overbroad speech offences to (i) publish per-request denials of restriction as routinely as they publish compliances; (ii) give targeted users a pre-restriction notice and a meaningful contestation channel; (iii) keep accredited human-rights NGOs and journalists inside a narrow protected category by default, with restriction only on the basis of a final, reasoned court order; and (iv) submit the underlying decisions to independent review under Global Network Initiative principles and the UN Guiding Principles on Business and Human Rights. As EFF argued in May 2026, the durable answer to state overreach is "effective remedies and reparation" anchored in clear legal frameworks, prior judicial authorisation, and independent oversight — obligations that bind governments first, but that platforms can mirror in their own appeal architecture.
Where Regulators Should Push
Western and allied regulators have, rightly, focused on platform accountability inside their own jurisdictions — the EU's Digital Services Act, the UK's Online Safety Act, India's IT Rules. The Gulf episode reveals the missing complement: a coordinated diplomatic and trade posture that treats overbroad foreign cybercrime statutes as a market-access problem for those jurisdictions, not merely a moderation problem for platforms. Until Article 6 and its UAE analogue are narrowed — or until Riyadh's requests are met with the same public scepticism that Brussels now reserves for Russian and Iranian takedown demands — every additional "lawful" geo-block deepens the precedent that human-rights documentation is something a platform may simply switch off at a regulator's request.
Meta's April 30 decision is, on its own terms, defensible. As policy, it is the wrong direction of travel.