MENA firms push for stronger cyber and digital identity rules
Cybersecurity, digital identity and data protection are emerging as key regulatory priorities for enterprises across the Middle East and North Africa, according to new GSMA Intelligence research.
The MENA Enterprise Digital Transformation Report 2026 surveyed 885 enterprises across ten MENA countries, including 423 in five GCC markets. The research covers policy and regulation alongside cybersecurity, AI, cloud, IoT and other digital technologies.
Across MENA, 28% of enterprises say current regulatory frameworks hinder digital transformation. Among those companies, 43% identify data protection, privacy and digital identity requirements as a barrier, while 50% point to licensing and authorization regimes.
The impact is already affecting investment decisions. Some 11% of surveyed enterprises postponed projects and 8% cancelled projects because of telecoms policy and regulatory requirements during the previous two years. Overall, 27% reported a negative regulatory impact on transformation projects.
Cybersecurity moves up the policy agenda
Looking ahead, 57% of MENA enterprises want policymakers and regulators to prioritize cybersecurity over the next three years, equal to the share calling for greater focus on AI. Connectivity networks follow at 56%.
The GCC reports a more supportive regulatory environment than the wider region, with 70% of enterprises saying current frameworks support transformation, compared with 61% across MENA.
The findings point to a broader shift in regional digital policy. As enterprises adopt more connected and AI-enabled systems, regulation around cybersecurity, identity, privacy and data governance is increasingly shaping not only compliance, but technology and investment decisions.
