Digital Transformation in the GCC
by Sophie Smith
The ongoing COVID-19 pandemic has made digital technology evermore relevant and critical as activities ranging from schooling, working to shopping have shifted to online platforms. Not only has this accelerated digital transformations, but digitalisation has become recognised as one of the key aspects of economic sustainability. The release of the United Nations E-Government Survey 2020, which measures progress in adopting digital government services worldwide, highlights this, pointing to the necessity of developing digital capacities, while underlining its challenges, including cybersecurity and data privacy. Throughout the Middle East and North Africa (MENA) region, the higher income Gulf Cooperation Council (GCC) countries take the lead in e-government, with the United Arab Emirates (UAE) ranking 21st, followed by Bahrain (38), Saudi Arabia (43), Kuwait (46), Oman (50) and Qatar (66).
Digital Initiatives in the Arab Gulf Region
Each GCC country has implemented digitalisation initiatives in line with their National Visions aiming to diversify the economy. The UAE launched several digital projects as part of its Vision 2030, including the Dubai Internet City, which acts as a hub for technological innovation to attract information and communications technology (ICT) companies. On top of this, the government has adopted the UAE Artificial Intelligence (AI) Strategy to invest in AI technologies, as well as the Emirates Blockchain Strategy 2021 to promote the development of blockchain technologies. Qatar has a similar initiative, Smart Qatar or TASMU, that realises technological solutions and cooperation across sectors consistent with its Vision 2030. Bahrain and Oman have also recognised the importance of digital technology; Bahrain’s Digital Government Strategy 2022 emphasises the transformation of services through digital technologies and Oman’s e.Oman focuses on IT industry development, ICT infrastructure and eGovernment. Further, Saudi Arabia and Kuwait have integrated digital developments into Vision 2030 and Vision 2035, respectively. Saudi Arabia has developed digital goals relating to e-commerce and financial technology (fintech), as well as established a digital skills training programme. In tandem, Kuwait’s ambitions focus on the Internet of Things (IoT) systems facilitated through the development of telecommunications, notably fibre optic networks.
The Impact of Digital Initiatives
Such strategies have significantly altered the Gulf societies. At large, they have helped the regimes realise their plans for economic diversification that encourage a more sustainable form of economic growth. Championing technological innovation through measures such as investing in 5G and AI and lower government regulations has attracted numerous foreign investors and businesses to the countries. For example, Bahrain hosts Amazon Web Services’ first data centre in the Middle East and the UAE’s Dubai Technology Entrepreneurship Campus accommodates more than 800 start-ups from 70 countries. This, in turn, creates new employment opportunities to accommodate the growing younger demographic and generates a large amount of revenue, all conducive to economic growth. Moreover, the emphasis on digital innovation has also helped the Gulf countries tackle COVID-19. Aside from introducing contact tracing apps, the countries have extensively employed AI to limit the spread of COVID-19. Saudi Arabia has launched several apps, including Tawakkalna, issuing movement permits during curfew hours, and Tetamman, providing online healthcare. The UAE police force has used its surveillance programme, Oyoon, to monitor valid movement permits, and smart helmets with thermal cameras to detect coronavirus. Similarly, the Royal Oman Police has employed drones to ensure individuals maintain social distancing.
The emphasis on digital innovation is equally beneficial to businesses. Digital infrastructure such as 5G improves data-speed transfers, which increases efficiency and flexibility while AI can boost productivity. Currently, Qatar and Saudi Arabia are among the top 10 countries with the highest labour productivity. Such a digital environment has also proven beneficial during COVID-19. The shift to remote working was regarded as efficient and swift as a result of existing digital infrastructures. Many companies have accelerated their digital transitions; for instance, MVC Global and Cox Logistics Group launched a ‘SmartHub’ logistics warehouse, which uses blockchain and AI to distribute food and medicines to the GCC market. Several businesses have also set up e-commerce platforms with satisfying outcomes.
Such initiatives – both from the governments and businesses – have increased the quality of goods and services and altered consumer behaviours. Through schemes, such as Saudi Arabia’s project to extend wireless broadband coverage to remote areas, the number of individuals with internet access rose above 90 percent in 2019 in all Gulf countries, except Oman (80.2 percent). As a result, citizens perform more tasks online; for example, Saudi Arabia’s Absher app allows citizens to apply to jobs or update passport information, among other functions. Online retail has also increased; the compound aggregate growth rate of online sales revenues in the Middle East is 16.9 percent from 2016 to 2021, with the UAE leading the rise. These trends have merely accelerated during the COVID-19 pandemic as consumers have rapidly adapted their behaviour, switching to online shopping and using card or mobile payments instead of cash.
Digitalisation, however, does not come without challenges. One notable concern is data protection and maintaining user privacy. Most recently, issues have arisen over COVID-19 contact tracing apps. This comes as Kuwait and Oman lack specific data protection laws, although certain provisions exist. The Kuwaiti E-Transactions Law ensures that client data is retained confidentially and the Omani Electronic Transaction Law protects and regulates the transfer of personal data. Equally, the UAE and Saudi Arabia do not have any specific data protection legislation, but it is predicted that they will soon adopt such laws. Despite that, Saudi Arabia’s regulatory cloud computing framework is among only a few in the world and the Kingdom’s privacy and data protection frameworks are partially aligned with the European general data protection regulation (GDPR). In contrast, Bahrain, Qatar and the UAE Free Zones, have comprehensive data protection laws, which mirror the European privacy legislation. Particularly the laws of Bahrain, Dubai International Financial Centre (DIFC) and the Abu Dhabi General Market (ADGM) are ‘heavily influenced by EU 1995 Data Protection Directive (1995 Directive), each enshrining the globally accepted fundamental principles of data protection.’ As data sharing increases, such laws become more important, necessary to safeguard user privacy.
Another challenge is cybersecurity and the potential of cyber-attacks. With increased digitalisation, the GCC countries have become more vulnerable to cyberthreats. In 2012, the Saudi oil company Aramco was subject to a software attack that significantly interrupted the company’s IT infrastructure. Bahrain has also reported several cyberattacks, such as in July 2019 when Iranian hackers attacked its National Security Agency, the Ministry of Interior and the Electrical and Water Authority. This comes despite their high ranking in the Global Cybersecurity Index, which assesses countries’ commitment to cybersecurity. Qatar set up the National Cyber Security Committee in 2013 to implement the National Cyber Security Strategy and has since introduced laws dedicated to cybercrime prevention. Likewise, Oman established National Computer Emergency Readiness Team to analyse threats. Saudi Arabia, Bahrain, Kuwait and the UAE all have similar measures in place. Such strategies help tackle cyberthreats but require continual reassessment to account for the ever-changing cybersecurity environment.
All in all, the GCC countries have made considerable advances in the technology sector, cultivating digital and innovative societies that have altered business operations and consumer habits. While on the whole this has proven beneficial, as exemplified by the response to the COVID-19 pandemic, challenges remain and should be continually addressed to ensure both user privacy and cybersecurity.
 United Nations Department of Economic and Social Affairs. “E-Government Survey 2020.” New York: United Nations, 2020.
 Dubai Internet City. “About Us.” Dubai Internet City, n.d. https://dic.ae/discover/about-us.
 UAE Artificial Intelligence Strategy. http://www.uaeai.ae/en/; United Arab Emirates. “Emirates Blockchain Strategy 2021.” United Arab Emirates Government Portal, n.d. https://u.ae/en/more/uae-future/2021#the-emirates-blockchain-strategy-2021.
 TASMU. “The Design Process Behind the TASMU Playbook.” TASMU, n.d. http://www.smart.gov.qa/en/story.
 Bahrain eGovernment. “Bahrain’s Digital Government Journey.” Bahrain eGovernment, n.d. https://www.bahrain.bh/egovernment; Ministry of Technology and Communications. “Main Strategic Pillar.” Ministry of Technology and Communications, n.d. https://www.ita.gov.om/ITAPortal/eOman/Main_Strategic_Directions.aspx.
 Vision 2030 Kingdom of Saudi Arabia. “Vision Progress.” Vision 2030, n.d. https://vision2030.gov.sa/en/vision-progress.
 New Kuwait. “Kuwait National Development Plan.” New Kuwait, n.d. http://www.newkuwait.gov.kw/plan.aspx.
 Amazon. “AWS Launches Region in the Middle East.” Amazon, July 30, 2019. https://press.aboutamazon.com/news-releases/news-release-details/aws-launches-region-middle-east; Dtec, Dubai Technology Entrepreneur Campus. https://dtec.ae/.
 Saudi Press Agency. “SDAIA Launches Tawakkalna App To Facilitate The Issuance of Movement Permits Electronically During The Curfew Period.” Saudi Pres Agency, May 4, 2020. https://www.spa.gov.sa/viewfullstory.php?lang=en&newsid=2082059; Ministry of Health. “(Tetamman) App.” Ministry of Health, n.d. https://www.moh.gov.sa/en/eServices/Pages/Rest-assured.aspx.
 Government of Dubai. “Dubai Police launch ‘Oyoon’ AI Surveillance Programme.” Government of Dubai, January 28, 2018. https://www.dubaipolice.gov.ae/wps/portal/home/mediacenter/news/details/A70; Emirati News Agency. “World Security introduces 'Smart Helmet' to detect COVID-19 infection in UAE.” Emirati News Agency, June 14, 2020. https://www.wam.ae/en/details/1395302848609.
 Royal Oman Police. Twitter Post. April 3, 2020, 8:25 am. https://twitter.com/RoyalOmanPolice/status/1245975704124231681.
 PricewaterhouseCoopers. “5G in Manufacturing.” PricewaterhouseCoopers, 2020. https://www.pwc.com/gx/en/industries/tmt/5g-in-manufacturing.html; PricewaterhouseCoopers. “US$320 billion by 2030? The potential impact of Artificial Intelligence in the Middle East.” PricewaterhouseCoopers, n.d. https://www.pwc.com/m1/en/publications/potential-impact-artificial-intelligence-middle-east.html.
 International Labor Organization. “Statistics on Labor Productivity.” ILOSTAT, n.d. https://ilostat.ilo.org/topics/labour-productivity/.
 Illankoon, Kasun. “MVC Global & Cox Logistics Group to launch Smart Hub logistics warehouse for pharmaceuticals and food.” Construction Business News, April 26, 2020. https://www.cbnme.com/logistics-news/mvc-global-cox-logistics-group-to-launch-smart-hub-logistics-warehouse-for-pharmaceuticals-and-food/.
 VISA. “COVID-19 CEMEA Impact Tracker.” VISA, 2020. https://www.visa.co.ke/run-your-business/small-business-tools/small-business-hub.html.
 Vision 2030 Kingdom of Saudi Arabia. “Vision Progress;” Institute for Management Development. IMD World Digital Competitiveness Ranking 2019. Lausanne, Switzerland, Singapore: Institute for Management Development, 2019. https://www.imd.org/wcc/world-competitiveness-center-rankings/world-competitiveness-ranking-2019/.
 “Abhser.” Vision 2030 Kingdom of Saudi Arabia, n.d. https://www.absher.sa/wps/portal/individuals/static/footer/about/!ut/p/z1/jY_BCoJAFEW_xq3vzYgm7UariRIqo7LZhMY4FeqImf5-VivBore7l3MuPBAQgSji5qri-qqLOOvyUTgnhwY-mbt0iXtngpspXbv2jFBcWnB4A5wQNqccA85DihufEWvEPOISG8Q__g_g5eOXY9j5YgBh6IXUsxD5ig4CvY0FCJXp5PMuKxLLVSAqmcpKVuaj6upLXZf3sYEGtm1rKq1VJs2zzg0cUi76XkPUJ2ErCyjzXYQ3O2uClD0B84zzrg!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/.
 Mehta, Anish and Sachin Bhandari. Going Digital: The Next Frontier for Middle East Retail. UAE: Deloitte, 2018. https://www2.deloitte.com/ae/en/pages/about-deloitte/articles/we-are-25/e-commerce.html.
 Murshid, Lamice. “MENA Consumers to Stay Frugal After COVID-19 Pandemic.” Ernst & Young, July 5, 2020. https://www.ey.com/en_ae/news/2020/07/mena-consumers-to-stay-frugal-after-covid-19-pandemic; VISA. “COVID-19 CEMEA Impact Tracker.”
 O’Neill, Patrick Howell, Tate Ryan-Mosley and Bobbie Johnson. “A flood of coronavirus apps are tracking us. Now it’s time to keep track of them.” MIT Technology Review, May 7, 2020. https://www.technologyreview.com/2020/05/07/1000961/launching-mittr-covid-tracing-tracker/.
 “Kuwait: Law No. 20 of 2014 concerning Electronic Transactions.” International Labour Organization, 2014. https://www.ilo.org/dyn/natlex/natlex4.detail?p_lang=en&p_isn=99810; Ministry of Technology and Communication. “Electronic Transactions Law.” Ministry of Technology and Communication, n.d. https://www.ita.gov.om/ITAPortal/MediaCenter/Document_detail.aspx?NID=56#:~:text=The%20Electronic%20Transactions%20Law%20of,the%20digital%20society%20of%20Sultanate.
 PricewaterhouseCoopers. “Saudi Arabia: Data Privacy Landscape.” PricewaterhouseCoopers, November 2019. https://www.pwc.com/m1/en/services/tax/me-tax-legal-news/2019/saudi-arabia-data-privacy-landscape-ksa.html#:~:text=Although%20there%20is%20currently%20no,of%20technology%20and%20electronic%20communications.
 GSM Association. Data Privacy Frameworks in MENA: Emerging Approaches and Common Principles. PwC Legal Middle East, 2019. https://www.gsma.com/mena/wp-content/uploads/2019/06/GSMA-Data-Privacy-in-MENA-Full-Report.pdf.
 Bahrain eGovernment. “Bahrain Legislations.” Bahrain eGovernment, n.d. https://www.bahrain.bh/wps/portal/!ut/p/a0/hY6xCsIwFAB_pUvm99piqGMRqXQpKGLMUkINMSYmTZoUP190F8c7bjjgwIA7sWolkvZO2A9zOh4GpGXVVH1Tn2tsB7o7bvdYdriBk3TQ_4sYXPUjBN4Cn7xL8pWASeXX2cck7Cgiwbt_SoIh68kUVjuzEIzZyqUQ7lZEqbL9Lv3SMJvu8gZY0qY2/; GSM Association. Data Privacy Frameworks in MENA: Emerging Approaches and Common Principles.
 GSM Association. Data Privacy Frameworks in MENA: Emerging Approaches and Common Principles, 5.
 Rashad, Marwa. “Saudi Aramco Sees Increase in Attempted Cyber Attacks.” Reuters, February 6, 2020. https://www.reuters.com/article/saudi-aramco-security/saudi-aramco-sees-increase-in-attempted-cyber-attacks-idUSL8N2A6703.
 Hope, Bradley, Warren P. Strobel and Dustin Volz. “High-Level Cyber Intrusions Hit Bahrain Amid Tensions with Iran.” Wall Street Journal, August 7, 2019. https://www.wsj.com/articles/high-level-cyber-intrusions-hit-bahrain-amid-tensions-with-iran-11565202488.
 International Telecommunication Union. “Global Cybersecurity Index.” International Telecommunication Union, n.d. https://www.itu.int/en/ITU-D/Cybersecurity/Pages/global-cybersecurity-index.aspx.
 Ministry of Transport and Communication. “National Cyber Security Strategy.” Ministry of Transport and Communication, n.d. https://www.motc.gov.qa/en/cyber-security/national-cyber-security-strategy; “Qatar: Law No.14 of 2014 Progulmating the Cybercrime Prevention Law.” International Labour Organization, 2014. https://www.ilo.org/dyn/natlex/natlex4.detail?p_lang=en&p_isn=100242.
 Oman National OCERT. “About OCERT.” Oman National OCERT, n.d. https://cert.gov.om/about.aspx.
 National Cybersecurity Authority. “About NCA.” National Cybersecurity Authority, n.d. https://nca.gov.sa/en/pages/about.html; Bahrain eGovernment. “Cybersecurity Framework in Bahrain.” Bahrain eGovernment, n.d. https://www.bahrain.bh/cybersecurity; United Arab Emirates. “National Cybersecurity Strategy 2019.” United Arab Emirates, n.d. https://u.ae/en/about-the-uae/strategies-initiatives-and-awards/federal-governments-strategies-and-plans/national-cybersecurity-strategy-2019; Kuwait Communication and Information Technology Regulatory Authority. “Cybersecurity and Emergency Response.” Kuwait Communication and Information Technology Regulatory Authority, n.d. https://citra.gov.kw/sites/en/Pages/cybersecurity.aspx.