Oman PDPL

Sultanate of Oman Personal Data Protection Law - consent, processor duties, sensitive data, transfers.


Short name	OM PDPL
Region	Middle East & Africa
Country or scope	Oman
Sector	Privacy
In your workspace	On unless you switch it off in Compliance › Manage.

How Safeguard covers OM PDPL

Scan requirements: 5, all decided by a scan.
Controls: the scan requirements below, plus 6 controls from Safeguard's control catalog for OM PDPL.
Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
Policy templates: 25: 3 written for OM PDPL and 22 from the standard set.

How each kind of coverage works, and what the readiness score counts: Compliance frameworks.

What a scan checks

Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).

Requirement	What Safeguard checks	Decided by
`OM-PDPL-SEC` Security of Personal Data	Controllers and processors must implement measures ensuring personal data is protected against breach, loss or unlawful processing; verifiable integrity of the software inventory evidences such measures (RD 6/2022, security-of-processing obligation)	Scan
`OM-PDPL-PROC` Processor Duties	Processing carried out on the controller's behalf must be bound by the controller's instructions and equivalent safeguards, requiring visibility into the suppliers behind the processing software (RD 6/2022, processor-obligations provision)	Scan
`OM-PDPL-BREACH` Breach Notification Readiness	Breaches of personal data must be notified to the competent authority and affected data subjects; assessing scope quickly requires known versions across the software handling the data (RD 6/2022, breach-notification obligation)	Scan
`OM-PDPL-XBORDER` Cross-Border Transfer Readiness	Transfers of personal data outside Oman are conditioned on adequate protection and must not prejudice data subjects; determining which systems transfer what requires precisely identifiable components (RD 6/2022, cross-border transfer provisions)	Scan
`OM-PDPL-TRANS` Transparency Toward Data Subjects	Data subjects must be informed of the processing of their data and its purposes; identified, timestamped documentation of the processing environment operationalizes this duty (RD 6/2022, transparency/notice obligations)	Scan

More controls in the catalog

The framework's Controls tab lists its scan requirements and these controls from Safeguard's control catalog. Evidence them with automated tests, uploaded evidence, policies or an attestation.

Control	Name
`OPDPL-ART5`	Data Subject Rights (Art. 5-9)
`OPDPL-ART11`	Data Security Requirements (Art. 11)
`OPDPL-ART13`	Cross-Border Data Transfers (Art. 13)
`OPDPL-ART14`	Data Breach Notification (Art. 14)
`OPDPL-CONSENT-1`	Consent and Lawful Processing Basis
`OPDPL-PROC-1`	Data Processing Agreements

Policy templates

Written for OM PDPL:

Oman PDPL: Privacy Notice
Oman PDPL: Data Breach Notification Procedure
Oman PDPL: Cross-Border Data Transfer Policy

And 22 from the standard set, adapted to OM PDPL.