English
عربي

Data Privacy & Digital Rights

Oman's Personal Data Protection Law (PDPL — Royal Decree 6/2022) is fully enforceable from 5 February 2026. MTCIT enforces. Cyber Crime Law (Royal Decree 12/2011) covers NCII and online harassment.

Covered in this guide:

Oman entered full data-rights enforcement on 5 February 2026, when the transition period for the Personal Data Protection Law (PDPL — Royal Decree 6/2022) ended. The PDPL entered initial force on 13 February 2023; the Executive Regulations (Ministerial Decision 34/2024) came into force on 5 February 2024. The regulator is the Ministry of Transport, Communications and Information Technology (MTCIT).

For NCII and unauthorised intimate imagery, the criminal framework is the Cyber Crime Law (Royal Decree 12/2011) content-crimes provisions — penalties range from a fine to imprisonment up to 15 years depending on the offence. Investigation runs through Royal Oman Police. Victims should also use StopNCII.org (18+) or takeitdown.ncmec.org (under-18) — both free, both work in Oman.

Key Laws

Personal Data Protection Law (PDPL — Royal Decree 6/2022)

Royal Decree 6/2022; Executive Regulations (Ministerial Decision 34/2024)

Oman's first comprehensive data protection statute. In force 13 February 2023; Executive Regulations from 5 February 2024; fully enforceable from 5 February 2026. Regulator: MTCIT.

Cyber Crime Law (Royal Decree 12/2011)

Royal Decree 12/2011

Covers content crimes including immoral / privacy-violating publication via electronic means; penalties up to 15 years' imprisonment depending on offence.

You came here to know your rights — help someone else know theirs.

Support This Mission