What Security Guards Can and Cannot Do in Saudi Arabia

This is the question that gets asked after the incident rather than before it. It should be the other way round, because the most common cause of a security guard exceeding his authority in the Kingdom is not the guard — it is a client who told him to.

The foundation: a guard is not a police officer

A private security guard in Saudi Arabia is a civilian employee of a licensed company. He holds no powers of arrest, no police authority, and no judicial function. His authority derives entirely from the property owner's right to control access to their own premises — not from the state.

Everything below follows from that single fact.

What a guard CAN do

• Refuse entry. The core power. He can decline to admit anyone to private property.
• Require identification as a condition of entry. Not compel you to produce it — but decline to let you in if you do not.
• Make screening a condition of entry. "You may not enter without a bag check" is lawful. The person is always free to leave instead.
• Ask a person to leave. And if they refuse, escalate to the authorities.
• Observe, record, and document. This is his single most valuable function and the one clients undervalue most.
• Log entries, exits, and vehicle movements.
• Call the police and preserve the scene until they arrive.
• Give first aid within the limits of his training.
• Defend himself or others — within the narrow, proportionate bounds of lawful self-defence. This is not a general licence to use force.

What a guard CANNOT do

• Arrest or detain. Not for five minutes "until the manager comes". Holding someone against their will is a deprivation of liberty and it is not within his authority — however certain he is that they stole something.
• Search a person by force. Screening can be a condition of entry. It cannot be imposed on someone who declines and wishes to leave.
• Search a bag against the owner's refusal. Same principle.
• Confiscate property. Phones, documents, merchandise, ID cards. Not his to take.
• Block someone from leaving. Standing in a doorway to prevent departure is detention by another name.
• Use force to compel compliance. Force is lawful only in genuine, proportionate self-defence — never as a tool of enforcement.
• Carry a firearm. Private security in the Kingdom is an unarmed discipline. Any provider implying they supply armed guards to ordinary commercial clients is misrepresenting the regulatory position.
• Handcuff or restrain. Including restraining a patient in a hospital — clinical restraint is a clinical decision, never a security one.
• Interrogate. He can ask questions. The person need not answer, and may walk away.

The trap: "just hold him until I get there"

This sentence, or a version of it, is said in Saudi facilities every single day. It is the single most common route by which a business creates serious legal exposure for itself.

The guard who obeys it has unlawfully detained someone. And because he was acting on the client's instruction, the liability does not stop at the guard. It reaches the security company and, very often, the business that gave the order.

A shoplifting loss of a few hundred riyals becomes a wrongful-detention claim. That is not a good trade.

The correct instruction is: observe, document precisely, photograph if lawful and safe, and call the authorities. A detailed, accurate report is worth vastly more — in court and to your insurer — than a physical intervention that was never lawful in the first place.

How to tell whether your provider understands this

Ask them directly: "If my staff tell your guard to hold a suspected thief, what will he do?"

The right answer is that he will decline, and that the company will back him in declining. A provider who says their guards will "handle it" or "do what the client needs" is not being accommodating. They are selling you a liability, and they will not be the ones paying for it.

Where the limits get written down

Legal powers are general. What your guard actually does on your site is governed by post orders — the written document setting out his response to each scenario, and the point at which he escalates.

A site operating without written post orders is a site where the guard is improvising, and improvisation is exactly how these limits get crossed.

A note

This is a practical explanation of how these limits operate in day-to-day security work. It is not legal advice. Regulations change, and specific situations turn on their facts — verify anything that matters with the Ministry of Interior or your legal counsel. See also our guide to MOI licensing.