Since late 2023, one regulator has run the entire Saudi insurance sector. What the Insurance Authority took over from SAMA and CHI, what it supervises, and what that means if you distribute insurance.
If you distribute, underwrite or build technology for insurance in Saudi Arabia, one regulator now matters: the Insurance Authority (IA). Established by Council of Ministers decision in August 2023 and operational since November 2023, the IA consolidated supervisory responsibilities that were previously split between the Saudi Central Bank (SAMA) and the Council of Health Insurance (CHI). That consolidation is the single most important structural fact about the Saudi market today, and this guide explains what it means in practice.
The short version: there is no longer a question of which regulator your insurance activity falls under. If it is insurance — underwriting, brokerage, agency, health cover, digital distribution — the IA is the supervisor, and its approval is the gate to operating lawfully.
Why the Kingdom created a dedicated regulator
Before the IA, insurance supervision in Saudi Arabia was an artifact of history rather than design. SAMA — a central bank whose primary mandate is monetary policy and banking stability — supervised insurance companies and intermediaries. CHI ran the mandatory employer health insurance scheme, giving health cover a second supervisory track. Two regulators meant two rulebooks, two licensing conversations, and gaps at the seams, particularly for digital models that touched both general and health lines.
A dedicated authority resolves that. The founding framework, built around fifteen key articles, gives the IA a mandate to unify regulatory procedures and consolidate the principles governing insurance contracts — one supervisor, one rulebook trajectory, one door to knock on. The move also signals ambition: sectors get standalone regulators when a government intends them to grow, and insurance growth is an explicit Vision 2030 theme.
The timeline that matters
- August 2023: the Council of Ministers approves the establishment of the Insurance Authority.
- November 2023: the IA commences operations.
- Transition period: SAMA and CHI continued exercising their existing insurance competencies until responsibilities transferred, with the pre-existing legal framework remaining in force pending new legislation.
The transitional detail is worth understanding. The IA did not tear up SAMA's rulebook on day one. Regulations issued under the previous regime — licensing rules, intermediary regulations, online insurance rules, consumer protection principles — carried over and continue to apply until the IA replaces or amends them. In practice, compliance teams work with a body of rules inherited from SAMA and CHI, progressively reissued under IA authority.
What the IA supervises
The Authority's remit covers the sector end to end:
- Insurance and reinsurance companies: licensing, solvency, conduct, product approval.
- Health insurance: the supervisory responsibilities previously exercised by CHI over insurers transferred to the IA, unifying health with general lines under one supervisor.
- Intermediaries and service providers: brokers, agents, claims settlement specialists, actuaries, loss assessors — the professions around the risk carriers.
- Digital distribution: online sales, aggregation and embedded models sit inside the perimeter, not outside it. A checkout that sells insurance is a regulated distribution channel, whoever built it.
The powers behind the mandate
Like most modern financial supervisors, the IA combines rule-making, authorisation and enforcement. It licenses market participants, sets the conditions under which they operate, collects and publishes market data (its annual market results are the sector's statistical baseline), and can discipline firms that breach its rules. It also owns the consumer protection agenda — complaint handling standards, disclosure duties and market conduct — which previously lived in SAMA's insurance rulebook.
One regulator with authorisation, rule-making and enforcement powers means one answer to the question every platform asks: who decides whether we can do this?
What this means if you are building on the market
For insurers, consolidation mostly means continuity with a clearer roadmap. For technology platforms and distribution businesses, three practical consequences stand out.
- Licensing clarity. Any activity that constitutes insurance distribution needs IA permission — held directly or accessed through a licensed partner. The old ambiguity about whether a digital model belonged to SAMA or CHI is gone.
- Health and general lines converge. Models that combine motor, medical and travel — common in embedded distribution — no longer straddle two regulators. This materially simplifies multi-line platform design. Yasmina operates as an IA-approved embedded insurance platform for exactly this reason: the approval covers the distribution layer so partner platforms do not need their own licence conversation.
- Expect the rulebook to move. A new regulator with a growth mandate reissues rules. Compliance functions should treat the current inherited framework as a floor, monitor IA circulars closely, and design processes that can absorb change — particularly around digital sales, disclosure and data.
What this guide does not cover
The IA's framework is evolving, and secondary regulations continue to be issued and revised. This guide describes the structural position — establishment, transfer of competencies, scope of supervision — based on the public record linked below. It is general information, not legal advice; for a live licensing question, speak to counsel and to the Authority itself.
Last reviewed: June 2026.