Law note · Oman
Personal Data Protection Law, enforcement and penalties
What it requires
- An app processing the personal data of an individual in Oman risks a Ministry-imposed fine that scales with the provision violated, from 500 Rial Omani for a minor breach up to 500,000 Rial Omani for an unlawful cross-border transfer, and the Ministry may also warn, order rectification or erasure, or suspend processing entirely.
When LexLint raises it
crawls_webtrains_modelsgenerates_contentdeploys_chatbotautomated_outreachhigh_risk_decisionsprocesses_voiceprocesses_biometrics
What we found
Art. 8 gives the Ministry power to warn, order rectification or erasure, suspend processing (temporarily or permanently), and suspend cross-border transfer for a violation of the Law.
A five-tier fine structure by article violated (no imprisonment terms found in the sections read): 500-2,000 Rial Omani for Art. 14 violations; 1,000-5,000 for Arts. 15-18, 20, 22; 5,000-10,000 for Art. 13; 15,000-20,000 for Arts. 5, 6, 19, 21 (including the biometric or sensitive-data permit requirement and child-data processing); and 100,000-500,000, far the highest tier, for Art. 23 (cross-border transfer) violations.
A legal person is separately fined 5,000-100,000 Rial Omani where the violation is committed in its name, "without prejudice to the criminal liability of natural persons," though no imprisonment clause was independently located in the sections read. No private right of action was found; enforcement reads as Ministry-administrative with tiered fines.