Oman Personal Data Protection Law

Oman PDPL

Royal Decree No. 6/2022 establishes Oman's first comprehensive personal data protection framework, administered by the Information Technology Authority (ITA). It aligns broadly with international standards on consent, data subject rights, and breach notification. Issued February 2022, it entered full effect in February 2023 following a one-year transition period.

Key Requirements

• Obtain explicit consent before collecting or processing sensitive personal data (health, financial, biometric)
• Provide data subjects with clear privacy notices describing the purposes and scope of processing
• Honour data subject rights to access, correct, and erasure of their personal data
• Notify the ITA of personal data breaches that may cause harm to data subjects
• Ensure that cross-border transfers of personal data comply with conditions set by the ITA
• Appoint a data protection officer for entities that conduct large-scale or high-risk processing

Related Documents (2)