Processes biometric data, in Oman

Royal Decree No. 6/2022, Art. 11 · Read the law's page

• An app must let an individual in Oman revoke their consent, request amendment or blocking of their data, obtain a copy of it, transfer it to another controller, request its erasure (unless national archiving requires otherwise), and must notify them of any breach or infringement of their personal data and the actions taken in response; these rights apply to a voiceprint, faceprint, or other biometric identifier like any other personal data.

Royal Decree No. 6/2022, Arts. 1, 5, 5 bis, as amended by Royal Decree No. 68/2026 · Read the law's page

• An app must obtain a Ministry permit before processing biometric data, including a faceprint or voiceprint, about an individual in Oman; the Data Subject's consent alone is not a sufficient basis, and the permit's own conditions sit in the Executive Regulations. Narrow exceptions apply under Article 5 bis, including processing of the controller's own staff data and processing through security cameras.

Royal Decree No. 6/2022, Arts. 2-3 and 10 bis, as amended by Royal Decree No. 68/2026 (formerly Art. 3(j)) · Read the law's page

• A scraper collecting the personal data of an individual in Oman from a public page may rely on Article 10 bis, item (b), only to skip the express consent that Article 10 otherwise requires; the Law still applies to that processing, and the data must be public in a manner that does not contravene the Law. A biometric identifier such as a faceprint or voiceprint derived from publicly posted photographs, video, or audio requires a Ministry permit under Art. 5 regardless of the recording's public availability.