← Global Privacy Laws Research Library
Royal Decree 6/2022 and attached Personal Data Protection Law
Oman Personal Data Protection Law - Royal Decree 6/2022
Prepared by Shubhank Suman · Last reviewed
Enacted text; publication-based commencement and later regulations not independently verified
- Legal character
- Royal decree and attached national statute
- Region
- Middle East
What it covers
The decree enacts the attached law, delegates executive regulations and repeals specified electronic-transactions privacy provisions. The attached law regulates consent, sensitive data, children, rights, safeguards, records, breaches, officers, marketing, overseas transfers and offences.
Why it matters
Many practical controls and procedures are delegated to regulations. The source alone cannot supply every deadline, permit procedure or transfer condition.
Refer to it when
Research Oman personal-data consent, sensitive-data permits, children, security incidents, officers, marketing consent or cross-border transfers.
AI, privacy and cybersecurity relevance
- AI: Moderate
- Privacy: Very High
- Cyber: High
AI
MODERATE
AI processing of personal, biometric or other sensitive data engages privacy duties; no general AI framework.
Privacy
VERY HIGH
Consent, rights and processing controls.
Cybersecurity
HIGH
Safeguards, records and breach notification.
Applicability
Processed personal data under article 2, with article 3 exclusions including specified public/security duties, vital interests, research, personal/family use and qualifying public data; these are not blanket exclusions for all commercial processing.
Read first
Decree I-IV → law 2-6 → 10-16 → 17-23 → applicable offence provisions.
Provisions / sections covered
Decree Articles I-IV - Promulgation
Enacts the law, provides executive regulations, repeals Chapter Seven of the Electronic Transactions Law and conflicting provisions; entry into force one year after Gazette publication.
Law Articles 2-6 - Scope and special data
Broad processing scope with article 3 exclusions; article 5 Ministry permits for listed sensitive categories; article 6 guardian consent and child best interests.
Law Articles 10-16 - Consent, rights and safeguards
Explicit consent, subject rights including withdrawal and access/correction, processing controls, advance information and controller/processor duties.
Law Articles 17-23 - Records, incidents and transfers
Records, Ministry cooperation, article 19 Ministry/subject breach notice under regulatory procedures, article 20 officer, marketing controls and article 23 overseas transfer safeguards. No fixed universal breach deadline is supplied by this statute.
Law Articles 24-32 - Offences
Distinct offences and penalty provisions; liability and enforcement mechanisms depend on the specific violated duty.
Subject-matter tags
- Consent
- Sensitive data
- Children's data
- Data breach
- Cross-border transfers
- Controller and processor
- Biometrics
- Enforcement and penalties
Subject-matter tags describe what the indexed text discusses. They are not legal conclusions.
Related instruments in this library
- Jordan Personal Data Protection Law No. 24 of 2023Law · Status not verifiedComparative personal-data framework only; not governing law in this jurisdiction.
- Federal Decree-Law No. 45 of 2021: UAE Personal Data Protection LawDecree-Law · CurrentComparative personal-data framework only; not governing law in this jurisdiction.
Document page in the Knowledge Base - full text or PDF where it is available for this record.
This library locates primary and official sources. It does not interpret the law and it is not legal advice.