What are the fines under Oman's PDPL?
Court-imposed fines run from OMR 500 to 2,000 for breaching the explicit-consent rules, OMR 15,000 to 20,000 for failing to notify a breach, and OMR 100,000 to 500,000 for unlawful transfers abroad. Companies face OMR 5,000 to 100,000. The Ministry can add administrative fines of up to OMR 2,000 per violation.
The highest band applies to cross-border transfers only, not to every violation. For a website, sending visitor identifiers to analytics or advertising platforms outside Oman is the usual transfer.
Read the full Oman PDPL guideSources
- 1.Royal Decree No. 68/2026 amending the Personal Data Protection Law (Arabic text, qanoon.om)
- 2.CMS — Oman updates its Personal Data Protection Law (September 2026)
Last reviewed . Not legal advice.