After almost 2 years from the issuance of the Personal Data Protection Law, the Ministry of Transport, Communications, and Information Technology published in this week’s issue of the Official Gazette the long-awaited Executive Regulation of the Personal Data Protection Law. When the Personal Data Protection Law was issued in 2022, it was a groundbreaking development for the Omani legal system since it was the first comprehensive privacy legislation to be issued in the country, however, due to the fact that the law left many of the practical implementation details to the executive regulation, many organisations in Oman had struggled waiting in frustration as they were unable to comply because the regulation was not issued, which was extremely problematic because this law grants the courts the power to impose fines up to 500,000 Rial Omani against those who fail to comply with the law.
I hope that I can say that the wait is finally over now that the regulation is finally out, but, realistically speaking, it will probably take the government at least several months to be able to create the processes required for them to receive and process applications relating to the permits envisioned by the law, and for this reason, the decision issuing the executive regulation has given another 1 year grace period for all parties involved to comply with the regulation and, by association, comply with the law.
This blog post will highlight some of the key features of the new regulation.