Oman’s Personal Data Protection Law, issued by Royal Decree 6/2022, comes into force today, a year after its publication in the Official Gazette. It is regulated by the Ministry of Transport, Communications and Information Technology.
Key points
- Applies to the processing of personal data in Oman.
- Permits from the Ministry are required for certain processing, including of sensitive data such as health and genetic data.
- Controllers must implement technical and organisational security controls.
- Personal data breaches must be notified to the Ministry and to affected data subjects.
- Cross-border transfers are restricted and must meet the conditions set by the law.
UK organisations with Omani operations, customers or outsourcing arrangements should map the personal data they process in Oman, check whether permits are needed and prepare for executive regulations that add further detail.
Source: Royal Decree 6/2022 Personal Data Protection Law (Ministry of Justice and Legal Affairs, Oman)
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
