01
Document overview
Official form for notifying MTCIT of a personal-data breach. MTCIT's FAQ states 72 hours from awareness for notifying the Ministry of a breach threatening affected persons' rights, and a separate 72-hour data-subject notice where serious harm or high risk is present.
02
Scope and exclusions
Applies to
Used by the controller to report the incident, affected data and persons, risk, consequences and response measures taken or planned.
Limitations and exclusions
Filing the form does not replace immediate containment, investigation, evidence preservation, affected-person notices, sector reports or remediation.
04
Official source
MTCIT operational form · breach report · Oman Ministry of Transport, Communications and Information Technology (MTCIT)
September 13, 2026
Open official source ↗