Tax
& Law+7 (495) 221 31 46
EN
RUEN中文العربية
Discuss a matter

Personal data protection · Regulatory layer

Guidelines for the Controller's Responsibility When Contracting with the Processor

Official MTCIT guidance on organising outsourced processing and allocating duties in the controller–processor contract. MTCIT's FAQ notes that the processor acts as the controller's agent for civil and administrative liability, without prejudice to the processor's own criminal liability.

Material typeOfficial MTCIT guide
Legal branchPersonal data protection
Legal layerRegulatory layer
Source languageOfficial Arabic material
Review dateSeptember 13, 2026

01

Document overview

Official MTCIT guidance on organising outsourced processing and allocating duties in the controller–processor contract. MTCIT's FAQ notes that the processor acts as the controller's agent for civil and administrative liability, without prejudice to the processor's own criminal liability.

02

Scope and exclusions

Applies to

Relevant to processor selection, instructions, confidentiality, security, sub-processing, rights assistance, incidents, audit, return or deletion and contract termination.

Limitations and exclusions

The guide does not transfer the controller's regulatory responsibility to the processor or replace sector rules, vendor due diligence or separate cross-border analysis.

04

Official source

MTCIT guideline · controller–processor contracting · Oman Ministry of Transport, Communications and Information Technology (MTCIT)

September 13, 2026

Open official source ↗

This editorial overview explains the instrument's subject and scope but does not replace the authoritative Arabic text or the current consolidated version.

WAWhatsAppTGTelegram