Laws and regulations
The laws, regulations and circulars the programme rests on, each with its official source.
Executive Regulation of the Law Regulating the Practice of Medicine and Allied Medical Professions
Ministerial Decision 231/2024 (Ministry of Health). It obliges a private health institution to run an electronic health information system in line with the systems approved by the Ministry (Art. 29), and makes the Ministry's approval of the system one of the documents of its licence (Art. 8).
National Health Information Governance and Management Policy
Ministerial Decision 85/2024 (Ministry of Health). The primary source of most technical requirements: identity and authentication, processing health data, patient rights, audit and breach reporting.
Personal Data Protection Law
Royal Decree 6/2022. Consent, the rights of the data subject, the duties of the controller and the processor, breach notification and transfers outside Oman.
Amendment of some provisions of the Personal Data Protection Law
Royal Decree 68/2026.
Executive Regulation of the Personal Data Protection Law
Ministerial Decision 34/2024 (Ministry of Transport, Communications and Information Technology). The processing permit, the duties of the controller and the processor, the external auditor, breach notification within 72 hours and cross-border transfers.
Cybercrime Law
Royal Decree 61/2026. It criminalises unlawful entry into systems (Art. 5) and accessing, altering or disclosing medical data without right (Art. 8).
Electronic Transactions Law
Royal Decree 39/2025. The legal effect and the retention of electronic documents, electronic signatures and trust services.
Telecommunications Regulatory Act
Royal Decree 30/2002, as amended. The confidentiality of communications and the licensing of telecom services.
National Data Governance and Management Policies
Ministry of Transport, Communications and Information Technology, 2025. Binding on government entities, and applied to the private sector through sector regulators.
Controls on the holders of posts related to information security, network administration and databases
Circular 7/2020 (Ministry of Technology and Communications). These posts are held by Omani nationals only, and technology service providers supply Omani staff exclusively for that work.
Controls on the holders of posts of systems development and analysis, website design and technical support
Ministerial Circular 11/2021 (Ministry of Transport, Communications and Information Technology). These posts are held by Omani nationals only.