A report published on 29 June 2026 by Amnesty International should be required reading for every foreign minister whose citizens visit Saudi Arabia. The organisation documented nine cases of foreign nationals — from the United Kingdom, France, the Netherlands, Lebanon, the United States, and Canada — arrested between 2022 and 2025 for social media posts they made before they ever set foot in the Kingdom. The cases were prosecuted principally under Saudi Arabia's Anti-Cybercrime Law and counter-terrorism statutes, with trials conducted through the Specialized Criminal Court, the Kingdom's counter-terrorism tribunal. None of the nine defendants were accused of violent conduct. All were accused of posts.
The Documented Cases
Three cases illustrate the pattern with particular clarity. Ahmed al-Doush, a British national, was arrested on 31 August 2024 at Riyadh's King Khalid International Airport while transiting home after a visit. The Specialized Criminal Court sentenced him to ten years in May 2025; on appeal in April 2026, this was reduced to five. Amr Abdelfattah, a French national who travelled to perform the Hajj pilgrimage, was arrested on 16 June 2024. Amnesty reports he spent more than eleven months in pre-trial detention, was denied access to counsel and family visits, had consular observers excluded from his trial, and was reportedly subjected to severe physical abuse. Haidar Slim, a Lebanese national who had also come for Hajj in 2022, was convicted for "publishing content that undermines public order and religious values" under the Cybercrime Law, sentenced to five years and a 10,000 SAR fine, and released in March 2025 after serving nearly three years.
The Legal Architecture
Article 6 of the Anti-Cybercrime Law of 2007 criminalises the production, transmission, or storage of content that impinges on "public order, religious values, public morals, or privacy" via information networks, carrying penalties of up to five years' imprisonment and a SAR 3 million fine. In more severe cases, prosecutors invoke the Counter-Terrorism Law, routing prosecution through the Specialized Criminal Court. Human Rights Watch's 2025 World Report describes that court as routinely equating peaceful expression with terrorism through "overbroad and vague provisions." The same court has issued sentences of 34 years for women's rights activist Salma al-Shehab and 45 years for Nourah al-Qahtani, both for social media activity alone.
A Legitimate Interest, Disproportionately Applied
Saudi Arabia's broad regulatory approach to online content is not without rationale. Governments across the democratic world — from Germany's Network Enforcement Act to the EU's Digital Services Act — have sought to limit content that destabilises social cohesion or threatens national security. Riyadh has genuine interests in restricting disinformation campaigns targeting its institutions and content that could incite domestic unrest. The question is not whether Saudi Arabia can regulate speech — it can — but whether prosecuting foreign visitors for posts made abroad, addressed to foreign audiences, before any entry to the Kingdom, is a proportionate exercise of that authority. By any established rule-of-law standard, it is not.
Retroactivity as the Structural Flaw
The nine documented cases share a structural feature that no proportionate content-moderation regime could justify: the speech was produced entirely outside Saudi Arabia, often addressed to audiences with no Saudi connection, and was legally concluded in the speaker's home jurisdiction before the speaker ever sought entry. A British citizen writing on social media in London receives no notice that Saudi authorities are monitoring, archiving, and building a criminal file on that speech for use at the airport months or years later. What Amnesty has documented is, in effect, retroactive prior restraint — a legal dragnet that casts criminal liability backward across the entire speech history of anyone who enters the country.
Vision 2030's Credibility Exposure
This creates a measurable contradiction at the centre of Saudi economic strategy. Saudi Arabia welcomed approximately 122 million visitors in 2025 — a five percent annual increase — and has revised its Vision 2030 tourism target upward to 150 million annual visitors by 2030, after the original 100 million benchmark was met in 2023, six years ahead of schedule. Tourism spending reached SR 300 billion ($81 billion) in 2025. The Ministry of Tourism has invested heavily in positioning the Kingdom as a safe and welcoming destination for international travellers. Amnesty International is now calling on governments to warn citizens that any social media post, made at any prior time, could result in arrest upon entry. That advisory — if widely issued — lands directly against the marketing infrastructure underpinning Vision 2030.
Platforms as Enforcement Proxies
The arrests do not stand alone. Since March 2026, Saudi authorities have requested that Meta restrict access to more than 100 Facebook pages and Instagram accounts belonging to Gulf-focused human rights organisations, researchers, and civil society figures. ALQST for Human Rights and Democratic Diwan are among those geo-blocked within Saudi Arabia. Meta has partially complied, citing Saudi cybercrime law. The pattern is one in which global platforms, headquartered in jurisdictions where Article 6-equivalent laws would be unconstitutional, are being enlisted as enforcement arms for speech restrictions the Saudi state cannot impose directly on offshore servers.
The Reform Argument
The 2007 Anti-Cybercrime Law is now nineteen years old, drafted before social media became the primary mode of public communication. A proportionate revision would narrow Article 6 to content directly constituting cybercrime in the conventional sense — fraud, network intrusion, targeted harassment — rather than any expression that can be stretched to "undermine public order or religious values," a standard with no natural limiting principle. Such reform would not abandon Saudi Arabia's right to regulate its digital environment. It would align enforcement with the international standards that Vision 2030's tourism ambitions implicitly presuppose. Foreign investors, pilgrims, and tourists cannot reasonably anticipate arrest for home-country speech. The law should match that expectation — or Vision 2030's credibility gap will only widen.