1- Introduction The Communications, Space & Technology Commission (CST) shall, in accordance with the Telecommunication and Information Technology Law (Law) issued by Royal Decree No. M/106, dated 2/11/1443H, and the Implementing Regulations thereof, and the Statute of CST (Commission), as amended by the Council of Ministers Resolution No. 133, dated 21/5/1424H, which entrusted the CST with regulatory tasks for the information technology sector, and in addition to the provisions of Article 7 in the Council of Ministers Resolution No. 292, dated 27/4/1441H, which stipulates the jurisdiction of the Commission to regulate Internet of Things (IoT) technology, be the entity responsible for regulating the communications and information technology sector in the Kingdom of Saudi Arabia (the Kingdom), including Internet of Things (IoT) technology and all use cases resulting therefrom in order to achieve the objectives set forth in Article 2 of the of the Law, including promoting digital transformation, technology use, and the benefits thereof across all domains, as well as promoting entrepreneurship, innovation, and research and technical development in the field of information technology, along with promoting the growth of sub-sectors and emerging technologies. Consequently, and in accordance with the Commission strategy and the strategic directions of the information technology and emerging technologies sector where such directions are based on enabling digital transformation and emerging technologies in the Kingdom, as well as encouraging competition and investment, and stemming from the keenness of the CST to enable the Internet of Things market in the Kingdom, the CST has issued these Regulations to adopt the best practices and administrative technological recommendations that relate to the technology of the Internet of Things. 2- Definitions Terms and phrases used herein shall have the same meanings defined in the Telecommunication and Information Technology Law, the Implementing Regulations thereof, and the CST Statue. The following terms and phrases shall have the meanings assigned thereto, unless the context stipulates otherwise: 2-1 IoT Devices: Devices cabaple to autonomously sense, monitor, and interact with their surrounding environment, alongside the ability to collect and transmit data. Such devices may be referred to as “Things” or “IoT device”. 2-2 Internet of Things (IoT): A network of IoT devices connected to platforms capable of managing these devices, as well as collecting and analyzing information monitored thereby. Internet of Things may be refrred to as “IoT’’. 2-3 IoT Connectivity: Communication means that enable IoT devices to connect and transmit data among each other, or to platforms, or to the Internet. 2-4 IoT Service: A service that allows controlling IoT devices, including obtaining the monitored data therefrom. 2-5 IoT Connectivity Service Provider: An entity that provides IoT connectivity to others. 2-6 IoT Service Provider: An entity that provides IoT service to others. 2-7 IoT User: Any person or entity that uses IoT service. 2-8 IoT Connectivity Service User: Any person or entity that uses IoT connectivity service. 4