Oman's Personal Data Protection Law (Royal Decree No. 6/2022) — the Kingdom's first comprehensive data privacy legislation, requirements, and obligations for businesses.
Ask GCC LexAI about Data Protection →Oman issued its first comprehensive Personal Data Protection Law by Royal Decree No. 6/2022. It establishes requirements for collecting, processing, and storing personal data, overseen by the Communications, Technology and Innovation Authority (CITIA, formerly CTA).
The law was issued in 2022 with a transition period given to businesses to achieve compliance. It covers all organisations processing personal data of individuals in Oman.
Key obligations include obtaining consent before processing personal data, implementing technical security measures, appointing a Data Protection Officer where required, notifying authorities of data breaches, and restricting cross-border data transfers.