Personal Data Protection

Source: Royal Decree No. 6/2022 (Personal Data Protection Law); Electronic Transactions Law (Royal Decree No. 69/2008)

Written in plain language for general understanding. This is educational content, not legal advice. Based on Omani royal decrees, ministerial decisions, and the Basic Statute of the State.

Omani National Law

What is this right?

Oman's Personal Data Protection Law (2022) gives individuals control over their personal data:

  • Consent: Organisations must obtain your clear consent before collecting, processing, or sharing your personal data.
  • Purpose limitation: Data can only be used for the specific purpose for which it was collected — not repurposed without your permission.
  • Right to access: You have the right to request a copy of all personal data an organisation holds about you.
  • Right to correction and deletion: You can ask for your data to be corrected if inaccurate or deleted when it is no longer needed.
  • Data breaches: Organisations must notify the authorities and affected individuals of data breaches within a specified period.
  • Penalties: Violations can result in fines and criminal prosecution of responsible individuals.

When does it apply?

  • A company collects your personal information (name, phone, email, ID number, location data) in Oman.
  • Your data has been shared without your consent or used for a purpose you did not agree to.
  • You suspect a data breach has exposed your personal information.

What should you do?

  • Read privacy policies before providing personal data to any organisation.
  • Exercise your right to access — request a copy of your data from any company that holds it.
  • If your data has been misused, file a complaint with the Ministry of Transport, Communications and Information Technology (MTCIT).
  • Request deletion of your data from companies you no longer do business with.

What should you NOT do?

  • Do not share personal data with unverified companies or websites.
  • Do not ignore data breach notifications — change your passwords and monitor your accounts.
  • Do not consent to broad data collection without understanding what data is being collected and why.

You came here to know your rights — help someone else know theirs.

Support This Mission