Customers are glad to get your appointment reminder. Add one line about a National Day offer and, under Oman's data protection law, the same text becomes marketing that needs the customer's explicit consent. The telecom regulator's new rules for promotional messages are now in their six-month rollout, so it is worth an hour of your team's time this month to know exactly where that line sits.
Two messages that look almost the same
Here is a composite example. Shamsa coordinates patient services for a polyclinic group with three branches in Muscat. Her team sends about 6,000 appointment reminders a month by SMS, and the call desk phones patients who have not confirmed. In mid-October the marketing team asks her to add one line to every reminder: 20% off teeth whitening for National Day.
The patient sees one text. The law sees two very different things. The first half is a service message, which exists because the patient booked something. The second half is marketing, and marketing has its own rulebook. Whether the whole text can legally go to everyone depends on something Shamsa's team has never tracked: which patients actually said yes to offers.
What the data protection law says about marketing
Oman's Personal Data Protection Law says a business must get a customer's explicit consent before sending them advertising or marketing material of a commercial nature. Explicit consent is a clear, active yes that the business can prove later. The executive regulation goes further: marketing consent must be in writing, customers must be told what they are agreeing to, and they need a way to unsubscribe.
The amendments that took effect on 7 September 2026 kept the marketing rule. They also listed cases where explicit consent is not needed, including processing needed to carry out a contract the customer is a party to. A booked appointment, a confirmed hotel stay or a car booked in for service reasonably fits that idea, although the law gives no examples. Breaking the marketing consent rule carries a fine of OMR 1,000 to OMR 5,000.
A reminder is about something the customer already asked for, but the moment you add an offer you are selling, and selling needs a yes on record.
What TRA changed in August
On 16 August 2026 the Telecommunications Regulatory Authority (TRA), which regulates phone networks and SMS, issued a regulation on promotional calls, service messages and value-added services. It is no longer a consultation draft. Press reports say businesses and operators have six months to comply. Here is what was reported:
- Promotional calls and messages only between 8am and 9pm Oman time.
- Promotional SMS sender names must show your commercial or legal name and start with "AD".
- Caller ID on promotional, service and automated calls must show your company name.
- Numbers registered to individuals cannot be used for promotional or service calls. That includes a front desk agent ringing patients from a personal mobile.
- Operators must let customers block promotional messages from all senders or from chosen ones, and report messages that keep arriving.
- Fines of up to OMR 30,000 for some breaches, doubled for a repeat within a year.
The AD prefix puts a label on your marketing on every customer's phone. If reminders and offers leave from one sender name, you face a bad choice: label everything AD and risk customers blocking your reminders along with your ads, or skip the label and break the rule. The fix for that, and for Shamsa's National Day request, comes below.
Where the line sits
| Message | Service or marketing? | Explicit consent needed? |
|---|---|---|
| Appointment reminder: date, time, branch | Service | No, it serves a booking |
| Hotel booking confirmation or check-in details | Service | No |
| Your car is ready for collection | Service | No |
| Insurer's renewal due date notice | Usually service | Not if it only states the renewal facts |
| Reminder plus 20% off whitening | Marketing | Yes, in writing |
| We miss you, book your next service | Marketing | Yes, in writing |
| National Day offer to everyone on file | Marketing | Yes, in writing |
Patients thank us for the reminder. They complain about the offer stapled to the bottom of it.
The worked example: split the message
Say 2,100 of Shamsa's patients have given written consent to receive offers. Here is the combined message compared with two separate ones. The SMS rate is an assumption, so use your own provider's price.
| Line | One combined message | Two separate messages |
|---|---|---|
| Reminders sent | 6,000 | 6,000 |
| Offers sent | Inside all 6,000 reminders | 2,100, consented patients only |
| SMS cost at an assumed OMR 0.010 each | OMR 60 | OMR 81 |
| Patients getting marketing without consent | 3,900 | 0 |
| Exposure under the marketing consent rule | Fine of OMR 1,000 to 5,000 | None from this rule |
Splitting costs Shamsa OMR 21 more a month. Redo the sums with your monthly bookings, your consented list and your provider's rate. The extra cost is almost always far smaller than one fine, and your reminders keep reaching customers who block ads.
How to stay on the right side
- Keep service templates clean. Reminders, confirmations and status updates never carry an offer. Write that into your template rules.
- Use two sender names. One for service messages, and one starting with AD for promotions, set up with your SMS provider.
- Keep a consent register. For each customer, record whether they agreed to offers, when, how and on which channel. If you cannot show it, count it as a no.
- Ask where the conversation already happens. Your call desk speaks to hundreds of people a day. Ask on the booking call, then send a short confirmation the customer replies to, so the yes ends up in writing.
- Make stop mean stop. Unsubscribing should take one reply, and the number should come off the offer list the same day.
- Retire personal mobiles. Reminder and follow-up calls go out from a business line that shows your company name.
- Schedule campaigns inside 8am to 9pm. Large sends take time to deliver, so finish well before the cut-off.
Step four is where automation earns its place. A rushed operator forgets the consent question on a busy morning. An AI agent on the phone line asks it on every call, logs the answer against the customer record and sends the confirmation text. If you use CustomerCare.OM for call handling, those records stay inside Oman. Our Oman AI calling guide covers the consent and recording rules for calls.
Shamsa's team did exactly this. Plain reminders now go out from the clinic's own sender name. The whitening offer went separately, from the AD sender, to the 2,100 patients who had said yes. The booking call now ends with one extra question.
What this means for you
If you run the service desk, look at every template you send this week, before the National Day campaign drafts are signed off. Pull service messages and offers apart, and send offers only to people whose written yes you can find. If you have not built that list yet, start with our piece on why marketing texts now need written consent.
If you are the customer, the reminder about your Thursday appointment is supposed to keep coming. Offers are different. You can refuse them, reply stop, and once operators roll out the new blocking tools, block a sender's ads without losing their reminders. If offers keep coming after you said stop, report it to your mobile operator. Complaints under the data protection law go to the Ministry of Transport, Communications and Information Technology.
Is a WhatsApp reminder treated differently from an SMS?
The marketing consent rule in the data protection law covers marketing on any channel. The AD sender rule concerns calls and SMS through licensed operators. A promotion on WhatsApp still needs consent.
Can we ask for marketing consent inside a reminder text?
It is safer to ask on the booking call or at check-in, where the customer is already talking to you. Some regulators abroad treat a text asking for consent as marketing in its own right.
Our offer only goes to existing customers. Do we still need consent?
Yes. Being a customer is not the same as agreeing to offers. Send the offer to those with written consent and keep everyone else on service messages.
The bottom line
A reminder serves something the customer already booked. An offer needs a written yes you can show. Keep the two in separate messages from separate sender names, ask for consent where your team already talks to customers, and the National Day campaign becomes a small task instead of a risk.
Sources checked for this article
- Telecommunications Regulatory Authority: Regulation on promotional and service calls, messages and value-added services (oman-official)
- MTCIT: Royal Decree 68/2026 amending some provisions of the Personal Data Protection Law (oman-official)
- Decree.om: Personal Data Protection Law (consolidated text, Articles 10 bis, 22 and 26) (analysis)
- Clyde & Co: Oman issues Executive Regulations to the Personal Data Protection Law (analysis)
- Muscat Daily: TRA sets time limits, tougher safeguards for marketing calls, SMS (16 August 2026) (media)
- Times of Oman: New telecommunications regulation protects consumer data and limits promotional messages (media)
Practical information, not legal advice. Rules and dates were checked on 21 October 2026; verify current official positions before acting.
