Without prejudice to the powers assigned to the Cyber Defence Centre, a Controller may transport Personal Data and permit its transfer outside the Sultanate of Oman in accordance with the controls and procedures prescribed by the Regulation. The Controller is prohibited from transporting Personal Data if it has been processed in violation of this Law or if the transport would harm the Data Subject.
This article belongs to the source version of Royal Decree 6/2022. Amendment 68/2026 has not yet been incorporated into the published article-by-article text. Interpretation and application must be checked against the official Arabic text and the current version.