Nine Cases, Four Continents, One Vague Law
On June 29, 2026, Amnesty International and Saudi human rights group ALQST published a report documenting nine foreign nationals imprisoned for social media activity — most of it posted before they set foot in Saudi Arabia. The cases span visitors from the United Kingdom, France, the Netherlands, Lebanon, the United States, and Canada. Some were Hajj or Umrah pilgrims. Others were tourists or family visitors. All were prosecuted through Saudi Arabia's Specialized Criminal Court under the Anti-Cybercrime Law (Royal Decree No. M/17, 2007) or counter-terrorism statutes, often without meaningful access to legal counsel, translation support, or open judicial proceedings. Amnesty warns that the nine documented cases likely represent a fraction of the total.
The individual cases are specific. Ahmed al-Doush, a British bank analyst and father of four, was arrested at King Khalid International Airport in Riyadh on August 31, 2024, while boarding a flight home to his pregnant wife and two children. The triggering evidence: a 2018 tweet about Sudan — unrelated to Saudi Arabia, deleted years before his visit. He was sentenced to ten years by the Specialized Criminal Court in May 2025; an appellate court reduced the term to five years in April 2026. The UN Working Group on Arbitrary Detention has since concluded his detention is unlawful. He remains in al-Hair Prison, Riyadh, where guards denied him contact with his children for speaking English.
Amr Abdelfattah, a French father of three, was arrested during Hajj in Mecca on June 16, 2024. His Hajj permit turned out to be fraudulent — an irregularity that ordinarily results in a fine or deportation. Instead, he was charged with "insulting the government" and "praising prosecuted individuals." According to Human Rights Watch, he has been held incommunicado since August 5, 2025, subjected to beatings by masked guards, solitary confinement, and denial of medical care. Secret proceedings began in May 2025; as of the June 2026 report, no sentencing date had been set.
Haidar Slim, a Lebanese national, received five years imprisonment and a 10,000 SAR fine for filming himself reciting a Shia religious chant during Hajj — charged with "publishing content undermining public order and religious values." He was released in March 2025 after diplomatic intervention following nearly three years in custody. Fahd Ramadhan, a Dutch-Yemeni restaurant owner living in the Netherlands as a refugee since 2018, was detained for 18 months without formal charge after returning briefly to collect citizenship documents; interrogators presented him a document containing four of his tweets and asked him to sign it. He was released in June 2025.
The Statute That Makes This Possible
Saudi Arabia's Anti-Cybercrime Law, enacted under Royal Decree No. M/17 in March 2007, has a defensible core. It targets financial fraud, trafficking facilitation, unauthorized system access, and distribution of obscene content online. Governments have genuine interests in combating these harms, and Saudi Arabia, like many states, faces real threats from coordinated disinformation and state-linked harassment campaigns. An information security framework is a legitimate regulatory objective.
The problem is Article 6. It authorizes up to five years imprisonment and fines up to 3 million SAR for producing, transmitting, or storing "material impinging on public order, religious values, public morals, or privacy" through any information network or computer. Those terms are undefined. The law sets no threshold of harm, requires no demonstrated impact, and specifies no geographic nexus to Saudi Arabia — meaning a tweet posted in London to a British audience can become criminal evidence the moment its author lands at King Khalid Airport. Article 7 extends penalties to ten years for content deemed to threaten "internal or external security" — equally open-ended language that has been applied to peaceful criticism of government policy.
The Specialized Criminal Court, established in 2008 ostensibly for terrorism cases, has become the primary venue for these prosecutions. It operates under rules that restrict defense access, permit closed proceedings, and lack the independence expected in adversarial judicial systems. The same court has handed Saudi nationals decades-long sentences for Twitter activity. Foreign nationals face the added disadvantage of language barriers, restricted consular access, and no functioning right to translation — the report documents detainees being forced to sign Arabic-language documents they could not read.
Platform Pressure Extends the Architecture
The enforcement reach extends beyond individual arrests into platform governance. Since April 30, 2026, Meta has geo-blocked Facebook and Instagram accounts of ALQST, Democratic Diwan, Saudi researcher Abdullah Alaoudh, and human rights defender Yahya Assiri from reaching audiences in Saudi Arabia, at the Saudi government's request, citing alleged cybercrime law violations. ALQST reports that over 100 Facebook pages and Instagram accounts have been restricted since March 2026. Twelve international human rights organizations condemned the blocks as "arbitrary, discriminatory, and a direct violation of the right to freedom of expression." X (formerly Twitter) received similar geo-blocking requests for accounts of prominent Saudi activists and, as of May 2026, had declined to comply.
The pattern is internally coherent: a vague statute, enforced by a non-independent court, backed by platform pressure against those who document the enforcement.
The Vision 2030 Tension
Proportionate cybercrime legislation anchors liability to content posted with intent to affect the regulating jurisdiction, requires a demonstrated harm threshold, and provides defendants with translation rights, counsel access, and open proceedings. Saudi Arabia's current framework meets none of these standards.
Saudi Arabia simultaneously pursues Vision 2030, an economic diversification initiative that places significant weight on tourism and attracting foreign visitors. The kingdom receives approximately 25 million Umrah pilgrims annually. That growth model is now in direct tension with a legal environment in which a 2018 deleted tweet, a filmed religious chant, or a social media like can result in airport arrest, incommunicado detention, and a multi-year sentence in a secret proceeding.
Foreign governments — including those of the UK, France, Netherlands, US, and Canada, all represented in the documented cases — should issue specific, updated travel advisories warning nationals that pre-trip social media history constitutes a documented legal risk in Saudi Arabia. Governments with nationals currently detained should press for consular access and open proceedings as a baseline diplomatic demand. And the Saudi government, if its Vision 2030 ambitions are to be credible, faces a direct economic incentive to reform a law that is producing documented cases of pilgrims tortured in custody and tourists arrested at departure gates over years-old posts.