Christine Khoury

Previous work:

• Advised a major cloud computing platform on the legal and operational challenges of managing data centers during regional conflicts. Addressed critical constraints arising from the absence of cross-border government data transfer laws. Provided strategic guidance on risk mitigation, data handling, and regulatory considerations to safeguard service continuity (UAE).
• Advised a massive cloud computing platform on Saudi procurement regulations, focusing on alignment with the Government Tenders and Procurement Law and the National Procurement Strategy (in relation to cloud computing services). Identified gaps between internal policies and local requirements and supported the development of a compliant and efficient procurement framework (KSA).
• Advised a major American technology company on AI regulations, strategies, and initiatives across the region, including the impact of AI tools on regulated sectors. Drafted an AI whitepaper highlighting use cases and benefits across industries such as financial services, insurance, and capital markets (UAE).
• Advised a Saudi government authority on the restructuring and renegotiation of a strategic digitization project. Provided legal and commercial guidance to support the realignment of contractual arrangements and project delivery framework (KSA).
• Advised a major self-driving car company on data privacy matters, including data mapping and cross-border data transfers. Supported compliance with regional data protection requirements and emerging regulatory frameworks governing connected vehicle data (KSA).
• Advised on data privacy and protection matters with a focus on cross-border data transfers across regional and international transactions. Provided guidance on compliance with applicable data protection laws and transfer mechanisms (GCC).
• Advised a major Chinese state-owned automobile manufacturer on data protection and regulatory issues relating to vehicle-generated data in KSA. Provided guidance on compliance with PDPL, transport regulations, and geospatial restrictions, and supported the development of internal data governance frameworks (KSA).
• Advised a major Chinese state-owned mapping and location-based services provider on the regulatory, licensing, and data compliance frameworks required to launch digital services in KSA. Delivered strategic counsel on CST licensing, GEOSA geospatial restrictions, and PDPL compliance, specifically addressing strict KSA cross-border data transfer limitations.
• Advised a European IoT technology provider on legal and regulatory requirements for launching IoT-enabled services in KSA. Provided guidance on CST regulations, device compliance, cybersecurity obligations, and PDPL requirements, including data localization and transfer restrictions (KSA).
• Advised a regional e-commerce platform on a strategic IT outsourcing initiative following a private equity investment. Drafted and negotiated a complex outsourcing agreement (in line with SAMA regulations), addressing regulatory compliance, data protection, risk allocation, and contractual protections to support regional scalability (KSA).