Can I build my own cookie banner?
Yes. The PDPL asks for a result, not a tool: consent before analytics and advertising tags run, a separate, explained choice for each purpose, a record of each answer, and settings that let visitors withdraw. A banner you build has to do all of that; one that shows a message and stores nothing leaves nothing to show.
The hard parts are the ones visitors do not see. Each choice has to reach the tags: Google tags learn it through Consent Mode v2, and tags that do not read Consent Mode, such as the Meta Pixel, have to be kept from loading until the visitor consents. The record has to show when the visitor chose, what they were shown, what they accepted or refused, and every later change.
A banner copied from another site needs the same check: open your site in a private window, confirm the banner appears before you choose, and scan which cookies load before anyone answers. Once SDAIA formally notifies an organisation of an alleged violation, it has five days to respond, which is too short to rebuild a consent history.
Read the full Saudi PDPL guideHow Arqam360 handles this
If you would rather install than build, Arqam360 is an app on Zid, Shopify and WordPress, with the Salla app in Salla's review, or one line of code on any site. Each answer is kept with its date and time. Or we install it for you.
See how it worksSources
- 1.Personal Data Protection Law — official English text (SDAIA)
- 2.Implementing Regulation of the Personal Data Protection Law (SDAIA)
Last reviewed . Not legal advice.