When Saudi authorities arrested Ahmed al-Doush at Riyadh's King Khalid International Airport on 31 August 2024, the British father of four had just completed a family visit. He had published no content while in Saudi Arabia. What triggered his arrest — and ultimately a five-year prison sentence — were social media posts he had made before crossing the border.
Al-Doush's case is one of nine documented by Amnesty International in a report released 29 June 2026, covering foreign nationals imprisoned during visits to Saudi Arabia between July 2022 and late 2025. The detainees include British, French, Dutch-Yemeni, Lebanese, American, and Canadian citizens. Four were performing Hajj or Umrah; five were tourists or visiting family.
The Statute Behind the Arrests
The prosecutorial instrument in each documented case is Saudi Arabia's Anti-Cybercrime Law, issued as Royal Decree M/17 on 26 March 2007. Article 6 criminalises the production or transmission of material that "impairs public order, religious values, public morals, or privacy" via information networks, with penalties of up to five years' imprisonment and fines up to SAR 3,000,000 (roughly $800,000). Article 7 reserves up to ten years for terrorism-related digital offences — a provision also applied in some cases. The law contains no explicit territorial limitation. Courts have treated it as applicable to any person physically present in Saudi Arabia, regardless of where or when the offending content was created.
Prosecutions have been handled by the Specialized Criminal Court — the same tribunal used for terrorism cases. Amnesty documents that several defendants were denied consular access for weeks, refused legal representation, or tried in proceedings it characterises as grossly unfair.
The Strongest Case for Enforcement
Every sovereign state retains the right to determine who enters and to prosecute conduct it considers injurious to public order. Under one reading, Saudi Arabia is choosing not to extend hospitality to individuals who have demonstrated, through prior online speech, a willingness to undermine religious or civic norms. Several liberal democracies deny entry or visas based on criminal histories, including conduct that occurred abroad. The argument that a government may factor past expressive conduct into assessments of present risk is not entirely without logic.
Where the Logic Fails
The Amnesty documentation reveals a pattern that stretches this principle past its breaking point. Fahd Ramadhan, a Dutch-Yemeni national, was arrested in November 2023 and held for 18 months without formal charges before his release in June 2025 — for posts expressing sympathy with a critic of the Saudi royal family. Amr Abdelfattah, a French national arrested during the Hajj pilgrimage on 16 June 2024, was denied legal representation and held 11 months before trial. Haidar Slim, a Lebanese national, received a five-year sentence and a SAR 10,000 fine for posts he made outside Saudi Arabia, before ever entering the kingdom.
The structural defect is clear: persons were admitted to Saudi Arabia, then arrested during or after their stay for content created in different jurisdictions, under different legal frameworks, at different times. A French citizen posting opinions about Saudi governance in Paris was exercising rights explicitly protected by French law. Saudi Arabia is asserting criminal jurisdiction over acts that were lawful, completed, and geographically remote when performed. That is not domestic content enforcement — it is the projection of domestic speech norms into foreign legal systems.
Proportionate content regulation requires that those subject to enforcement could have foreseen and conformed their conduct to the applicable rule. Pre-arrival speech, published abroad under another country's laws, fails that test entirely. Visitors cannot retroactively revise past expression to comply with a law they had no reasonable means of knowing applied to them.
A Structural Contradiction with Vision 2030
Saudi Arabia attracted 122 million visitors in 2025, including 29.7 million international tourists, generating SR300 billion ($81 billion) in tourism spending. Vision 2030 targets 150 million annual visitors by 2030, aiming to double tourism's share of GDP from 5% to 10%. Tourism Minister Ahmed Al-Khateeb has described Saudi tourism as "a growth engine building investor confidence" globally.
That ambition is structurally incompatible with the enforcement pattern Amnesty documents. Foreign visitors cannot assess their legal exposure before travel if that exposure includes speech published in other countries, under other laws, sometimes years before the visit. No government travel advisory currently warns of this risk. The chilling effect extends well beyond the nine documented cases — to the millions of Hajj pilgrims, business travellers, and tourists who learn of these arrests and quietly recalibrate their plans.
A Wider Pattern of Digital Enforcement
The detained visitors are not an isolated outcome. Since March 2026, Saudi authorities have requested that Meta geo-block over 100 Facebook and Instagram accounts belonging to human rights NGOs and researchers from reaching Saudi audiences — documented by ALQST and Access Now in May 2026. A separate Amnesty International report released in June 2026 documented more than 1,000 arrests across six Gulf states between March and May 2026 for social media posts related to regional conflict.
The pattern is consistent: Saudi Arabia treats digital content enforcement not as a domestic regulatory exercise but as a transnational project — prosecuting foreign nationals for foreign speech and recruiting global platforms as cooperative enforcers. Until the enforcement posture changes, foreign visitors to the kingdom carry an undisclosed legal liability attached to their social media history. No tourism brochure currently discloses it.