AI in the Middle East

2022-2025: Key Trends

1) Sovereign + strategic deals accelerated

• Microsoft–G42 ($1.5B): Azure-anchored tie-up; Brad Smith joined G42’s (Group 42 Holding) board; paired with a U.S. license to supply advanced AI chips to a Microsoft-run UAE site.
• France–UAE 1 GW AI campus: framework to build Europe’s largest AI data-center cluster; MGX (Abu Dhabi) later appeared in JV plans with French partners and Nvidia/Mistral.
• MGX formation: an AI investment platform backed by Mubadala and G42 to finance infra/models; reports suggest multi-billion ambitions.

2) Regional model ecosystem

• Falcon 2 (TII, UAE) open models (e.g., 11B/40B) signaled credible local pre-training capacity and community adoption.
• Jais (Core42/MBZUAI) as an Arabic-first LLM line (13B→30B), widely used as a regional baseline.

3) Autonomous mobility beachhead

• Dubai granted autonomous trial permits, targeting 1,000 robotaxis by ~2028 (Baidu Apollo Go; has the same target). Fits Dubai’s 25% autonomous journeys goal by 2030.

4) Regulation and trust

• Saudi PDPL (Personal Data Protection Law): in force Sept 2023; enforcement since Sept 14, 2024; SDAIA (Saudi Data & Artificial Intelligence Authority) guidance continues to evolve.
• UAE PDPL (Fed. Decree-Law 45/2021): in effect since Jan 2022 with the UAE Data Office as federal authority (note: DIFC/ADGM have separate regimes).
• Qatar PDPL (Law 13/2016): in force since 2017 with regulator guidance; fines can reach QAR 1 million in certain cases.
• Cyber baselines: Saudi NCA(National Cybersecurity Authority) ECC (Essential Cybersecurity Controls – 114 controls) and SAMA(Saudi Central Bank) Cybersecurity Framework remain the reference in KSA-material to AI deployments in finance/critical infra.
• Content/AI image governance: UAE media authorities issued explicit rules (e.g., on AI-generated depictions), signaling tight content risk in public-facing AI.

5) Capital formation & venture

• MENA VC in H1 2025 ~$1.5B (≈301 deals); UAE and KSA remained the top destinations.
• Saudi exploring a ~$40B AI fund via PIF (reported plan; not a finalized program).

Growth snapshot

• GCC AI market (all AI, not just GenAI) was about $5.4B in 2024; IMARC projects ~15% CAGR to 2033. Treat higher GCC figures with caution unless scope includes infra/DC CAPEX or a wider geography (MEA/MENA).
• GCC GenAI: small base ($316M in 2024) but ~33% CAGR expected through the 2030s.
• MEA/MENA-wide market figures look much larger because they include Africa/North Africa and sometimes infrastructure/services; this explains headlines in the $12–18B (2023/24) range and high-30s to mid-40s CAGRs. Use with scope notes.

Risk landscape

• Compute & supply-chain geopolitics: Export licensing for top-tier GPUs to the Gulf remains politicized; approvals can be granted—and revisited. Build with license-proofing (alt SKUs/AMD paths), lease-vs-own flexibility, and multi-cloud.
• Data sovereignty & cross-border: PDPL-style regimes (UAE/SA/Qatar) impose consent, purpose limits, and transfer rules—plus sector overlays (finance/health). Expect DPIAs (Data Protection Impact Assessments), local processing, and standard contractual terms.
• Sectoral security: For KSA financials and CNIs, NCA ECC & SAMA CSF controls (board-level governance, third-party security, resilience) affect AI go-lives and vendor onboarding.
• Content & civic risk: Generative outputs hitting cultural/political red lines (e.g., deepfakes of national symbols) can create legal & reputational exposure. Calibrate safety filters to local policy.

5-year outlook (2026-2030): base, upside, downside

Base case (most likely)

• Compute localization progresses with France–UAE and Gulf DC projects; UAE stays the regional hub for model training/fine-tuning; KSA leads in industrial & public-sector AI.
• Dubai AV commercialization moves beyond pilots; regulated robotaxi coverage in defined zones, scaling toward ~1,000 vehicles.
• Market growth: GCC AI spend expands at mid-teens CAGR, GenAI at ~30% off a small base. Public-sector demand (justice, health, urban ops) anchors spend.

Upside (if two or more of these happen)

• Large U.S. chip export regime to the UAE is finalized and stable; MGX closes multi-tens-of-billions for infra and European JV campuses; local LLMs gain parity in Arabic enterprise tasks → GCC CAGR drifts >20%, GenAI >40%.

Downside (watch-outs)

• Export rules tighten or stall; power/water constraints slow 1 GW-class campuses; fragmented regulations raise costs—dragging GCC AI growth to high-single-digits. (Risk inference based on policy volatility and infra demands noted in recent EU/Gulf AI infra reporting.)

Operator playbook

• Compliance-by-design: bake PDPL/PDPL/PDPL (UAE/SA/Qatar) plus NCA ECC & SAMA CSF into model life-cycle, vendor DDQ (Due Diligence Questionnaire), data residency, and contracts from day one.
• Arabic + domain models: Prioritize Arabic-first and bilingual models (Falcon/Jais) for CSAT and latency; augment with retrieval and red-team content filters tuned to local policies.
• Mobility & cities: If you touch transport/logistics, align to Dubai’s 2030 SDT (Smart Driverless Transport) strategy and AV permitting cadence.
• Capital & partnerships: Track MGX and sovereign programs for co-investment and infra access; treat mega-campus headlines as frameworks until FID and PPA are public.

Originally published on LinkedIn, 6 October 2025.