Oman: Royal Decree 6/2022 (PDPL)

Oman's PDPL requires explicit consent and reporting breaches within 72 hours. The law reached full compliance status in Feb 2026. Organizations must a...

Non-Compliance Penalties

Up to OMR 500,000 (~$1.3 Million)

Effective Date

Feb 13, 2023 (Compliance required by Feb 5, 2026)

Regulatory Authority

Ministry of Transport, Communications and IT (MTCIT)

Residency Rule

Permitted to countries with adequate protection. Health/Biometric data requires MTCIT permit.

Executive Summary

Oman's PDPL requires explicit consent and reporting breaches within 72 hours. The law reached full compliance status in Feb 2026. Organizations must appoint a DPO and maintain processing records.

View Official Legal Text