OMAN LAW AND PRACTICE Contributed by: Said Al-Shahry, Thamer Al-Shahry, Jeremy Pooley, Maria Mariam Rabeaa Petrou, Shadha Al Kharusi and Salim Al Harthi, Said Al Shahry & Partners (SASLO )
• the protection of national security or public interest; • the execution by the units of the Administra - tive Apparatus of the State and other public legal persons of their functions prescribed to them under law; • compliance with a legal obligation imposed on a controller under any law, judgment or court decision; and • the protection of the economic and financial interests of the State. Rights of the Data Subject Consent Under the DPL, personal data may only be pro - cessed with the data subject’s express consent. This is to ensure that any processing of personal data is done within the framework of transpar - ency, honesty and respect for human dignity. Any request to process personal data must be in writing, in a clear and understandable manner. Sensitive personal data The DPL provides for a general restriction on the processing of certain data, including: • genetic and biometric data; • health data; • data relating to an individual’s ethnic origin, sexual life, political or religious opinions or beliefs, criminal convictions; and • data relating to security measures. The processing of such data will require authori - sation from the MOTCIT. Other rights Data subjects enjoy several other rights under the DPL, including the right to: • obtain a copy of their processed personal data;
• transfer personal data to another controller; • revoke their consent in respect of the pro - cessing of their personal data; • amend, update and withhold personal data; and • be notified of any breach or violation of their personal data and measures taken in this regard. 8.2 Geographical Scope The DPL applies to any processing of data in Oman. Similarly, the transfer of data outside Oman may only be done in accordance with the controls specified in the Regulations. 8.3 Role and Authority of the Data Protection Agency The MOTCIT is the authority responsible for implementing the DPL and has the right to do the following: • prepare the controls related to the protec - tion of personal data, including specifying the necessary safeguards and measures required to protect personal data; • issue procedures for processing personal data and ensure the compliance of controllers and processors with such procedures; • receive complaints filed by the data subject and decide on them within the period speci - fied in the Regulations; • co-operate with competent entities in other countries with respect to the protection of personal data; • provide advice and support to units of the administrative apparatus of the State and other public legal persons in matters related to personal data protection; • draft guidelines for implementing the DPL whenever necessary; and
609 CHAMBERS.COM
Powered by FlippingBook