Oman Civil Transactions Law
Royal Decree 29/2013The core private-law statute on obligations, contracts, torts, property rights and nominated contracts.
TaxOmani legal materials catalogue · Page 1 / 12
Browse laws, regulations and official guidance by title, subject and document number.
The core private-law statute on obligations, contracts, torts, property rights and nominated contracts.
The 312-article principal statute on company forms, incorporation, capital, governance, conversion, merger and dissolution.
Regulates employment contracts, pay, working time, leave, termination, collective disputes and employer duties.
Sets rules for personal-data processing, individual rights, controller duties and cross-border transfers; it applies with the 68/2026 amendment and Executive Regulation 34/2024.
Details permits for sensitive data, Data Subject rights, audits, Processing registers, breach notices, DPOs, cross-border transfers, complaints and administrative sanctions.
Governs restructuring, preventive composition, bankruptcy, liquidation and the powers of insolvency participants.
Covers arbitration agreements, tribunal formation, procedure, interim measures, setting aside and enforcement.
Governs jurisdiction, commencement of claims, evidential procedure, judgments, appeals and enforcement.
Sets the VAT scope and rate, place and date of supply, exemptions, zero rating, recovery, registration and administration.
The core statute for company and permanent-establishment taxation, the tax base, rates, withholding and administration.
A future personal-income-tax regime: 5% on specified individual income above the statutory annual threshold, effective from 2028.
The new Banking Law replaced the 2000 regime and regulates licensing, supervision, conventional, Islamic, digital and investment banking.
The statutory foundation for payment systems and services in Oman, covering CBO powers, licensing and oversight, settlement finality and protection of infrastructure and participants.
Defines the licensing perimeter for PSPs and ancillary payment functions, including wallets, transfers, acquiring, payment aggregation, gateways and technology roles.
The current licensing and supervisory regulation for money-services business, including foreign exchange and remittance; it replaced the 1997 regime and covers capital, governance, controls, reporting and examinations.
Regulates securities issuance and offering, market participants, disclosure, licensing, supervision and enforcement.
Sets the framework for admission and protection of foreign investment, project forms, guarantees and licensing interaction.
A modern unified regime for special economic and free zones covering governance, licensing, land, customs, labour and incentives.
Governs ship registration and ownership, maritime operation, crew, contracts, safety, casualties, liability and insurance.
Sets the conditions for registering an aircraft in Oman, owner and lease eligibility, evidence, marks, mortgages and deregistration.
The updated regime for electronic documents, signatures, trust services, e-contracts and the legal effect of digital transactions.
Establishes a specialist court and defines its investment and commercial jurisdiction, composition and procedural features.
The 2026 statute on offences against information systems, data and digital operations and related liability measures.
Amends selected provisions of Royal Decree 6/2022. Until the amendments are incorporated into the published article-by-article text, the base law hosted here must not be treated as the current consolidated version.
Sets fees for personal-data processing permits where the Omani data-protection regime requires a permit.
The framework statute on merchants, commercial obligations, sale, intermediation, banking transactions and commercial paper.
Defines general criminal liability, penalties and offences, including property, public-office and economic crimes.
Governs investigation, prosecution and court powers, coercive measures, evidence, appeals and enforcement of criminal judgments.
Sets consumer rights and supplier duties on quality, price, advertising, returns, safety and disclosure.
Regulates anti-competitive agreements, abuse of dominance, economic concentration and competition-authority powers.
Governs commercial agency arrangements, the agencies register, principal and agent data, and certain effects of registration.
The principal statute on civil aviation, CAA powers, aerodromes, operations, safety, approvals and liability.
Provides the framework for selection, procurement, project agreements and supervision of public-private partnership projects.
The principal Executive Regulation details tax registration, computation, deductions, exemptions, withholding, returns, audits and supporting evidence. Decisions 14/2019, 313/2025 and 180/2026 are indexed in separate amendment records without repeating the principal instrument.
Introduces top-up-tax rules for in-scope multinational enterprise groups under the minimum-tax framework.
Details registration, place and time of supply, value, deductions, zero rating, exemptions, special zones, invoices and returns. Amendment 189/2026 introduces phased electronic-invoicing requirements from 1 April and 1 October 2027.
The principal statute establishes excise tax on designated goods, liable persons, registration, tax points, value, exemptions, returns, appeals and sanctions.
Defines ML/TF offences, duties of financial institutions and designated non-financial sectors, supervision, financial intelligence and international cooperation.
Sets the licensing and operating framework for account-information and payment-initiation providers, API access, consent, security and AML/CFT.
Describes the digital-bank licensing perimeter, business model, capital, governance, technology, risk, localisation and supervision.
Sets licensing, governance, capital, credit-risk, disclosure, customer-protection and reporting requirements for BNPL providers.
Connects Securities Law 46/2022 with the current Executive Regulation E/11/2026 and routes users to separate materials on licensing, market infrastructure, funds, issuers and disclosure.
Establishes an autonomous financial centre with separate regulatory and dispute-resolution bodies and a legal framework based on common-law principles.
Identifies activities unavailable to foreign-capital projects, limiting the general availability of foreign ownership.
Governs import, export, declarations, value and origin, duties, exemptions, transit, warehouses, zones and customs liability.
Details customs procedures under the Unified GCC Customs Law. The latest identified amendment, Decision 110/2026, was published on 2 August 2026.
Establishes the current framework for protecting eligible bank deposits, participation of licensed banks, scheme governance and compensation.
Official form for obtaining MTCIT's prior permit to process the personal-data categories listed in Article 5 of Royal Decree 6/2022. It requests controller and DPO details, purpose and proportionality, recipients, storage location, cross-border transfers, protection systems, the privacy policy and breach precautions.
Official form for notifying MTCIT of changes to information in an existing permit. The Arabic form states that the controller must report amendments within 15 days after they are made.
Official form for renewing an Article 5 processing permit. The English form states that the permit period is five years from its issue date.
Official form by which a controller requests cancellation of an issued permit, identifying the controller, the permit date and number and, optionally, the reason for cancellation.
Official form for an administrative grievance against permit rejection or an administrative penalty under the personal-data protection regime.
Official template for the controller's processing record. It covers the DPO, data categories and authorised personnel, retention and restrictions, erasure and amendment, purposes, recipients, cross-border transfers, security controls and incidents with remedial action.
Official form for notifying MTCIT of a personal-data breach. MTCIT's FAQ states 72 hours from awareness for notifying the Ministry of a breach threatening affected persons' rights, and a separate 72-hour data-subject notice where serious harm or high risk is present.
Official DPO appointment form under Chapter Seven of the Executive Regulation. It covers the controller and nominee, employment status, qualifications and experience, and lists a CV, experience certificate if available, good-conduct certificate and photograph as attachments.
Official cross-border transfer assessment covering data categories, volume and sensitivity, purpose and scale, participants, transfer route and final country, duration, data-subject risk and the recipient's legal, contractual, organisational and technical safeguards.
Official form for complaining or reporting a suspected breach of the Law, Executive Regulation or personal-data decisions. MTCIT's FAQ states a 30-day period from certain knowledge of the violation, a 14-day controller response window and a 60-day Ministry decision period.
Official nine-page guide helping controllers and processors prepare a policy aligned with Royal Decree 6/2022 and Regulation 34/2024. Its template covers processing principles, purpose and scope, data-subject rights, retention and disposal, the DPO, security, breaches, children's data and cross-border transfers.
Official MTCIT template for organising the mechanism through which a personal-data subject receives information and exercises statutory rights, including access, correction, transfer and updating.
Official MTCIT guidance on organising outsourced processing and allocating duties in the controller–processor contract. MTCIT's FAQ notes that the processor acts as the controller's agent for civil and administrative liability, without prejudice to the processor's own criminal liability.