Executive Regulation of the Personal Data Protection Law — Article 37

Before transferring Personal Data outside Oman, the Controller must obtain explicit consent and ensure the transfer does not prejudice national security or the State's supreme interests. Consent is unnecessary to perform an international obligation under a treaty binding Oman or where the transfer is anonymised so the Data Subject cannot be linked to or identified by any means.

Interpretation and application must be checked against the official Arabic text and the current version.