Blog · Series

Your Data, Your Rights

Oman's Personal Data Protection Law, consent and consumer rights, written for both the customer whose data it is and the business holding it.

4 November 2026

The Privacy Notice Nobody Reads, and What Yours Must Say

A caller asks who hears their recorded call, and your operator has no idea. Here is the one-page privacy notice your desk can actually explain, with a template to fill in.

8 min read

28 October 2026

Which Sensitive Personal Data Needs a Ministry Permit?

Your call desk hears about pregnancies, prescriptions and test results every day. The law calls that sensitive personal data, and it needs a permit. Salary files do not.

7 min read

21 October 2026

When Does an Appointment Reminder Become Spam?

Your reminder text is welcome. Add one National Day offer line and it becomes marketing that needs a written yes. Here is where the line sits, and the OMR 21 fix.

7 min read

30 September 2026

The First 72 Hours After a Data Leak

A leaked spreadsheet, a hacked vendor, a lost laptop: you have 72 hours to report it before the fine does the talking.

5 min read

23 September 2026

A Customer Asks You to Delete Their Data. Now What?

A customer emails asking you to delete their data. Here is the four step process, the response template, and the deadline worth treating as fixed.

6 min read

16 September 2026

Where Does Your Customer Data Actually Live?

Your booking system might store customer data in another country right now. Under Oman's law, that is your call to explain, not your vendor's.

6 min read

9 September 2026

Is It Legal to Record That Customer Call?

Your desk has recorded calls for years. Since Oman's data law went live for real, not saying so out loud is the compliance gap nobody checked.

5 min read

2 September 2026

What Counts as Consent When You Collect a Phone Number?

A guest's number for room service is not a yes to marketing texts. Here is the difference Oman's data law now enforces, and how to ask properly.

5 min read

26 August 2026

Five Rules for the Customer List You Already Have

Your booking spreadsheet, shared inbox and CRM are all covered by Oman's data protection law now that the grace period has ended. Five plain obligations, and a two minute check.

5 min read

19 August 2026

What Can You Ask a Business About Your Data?

A civil ID scan here, a phone number kept for years there, a recorded support call: Oman's data law says you can ask what a business does with it, and get an answer in 45 days.

6 min read

Put an end to hold music and IVR menus

Your first 100 minutes of customer conversations are free, and your customer data stays inside Oman.

Oman Personal Data Protection Law compliant · Data never leaves the Sultanate