01
Document overview
Official nine-page guide helping controllers and processors prepare a policy aligned with Royal Decree 6/2022 and Regulation 34/2024. Its template covers processing principles, purpose and scope, data-subject rights, retention and disposal, the DPO, security, breaches, children's data and cross-border transfers.
02
Scope and exclusions
Applies to
Intended to be adapted to the organisation's actual data categories, operations, rights channels and controls.
Limitations and exclusions
The template should not be published unadapted; a general policy does not replace specific notices, processor contracts, records, impact assessments or other mandatory documents.
04
Official source
MTCIT guide and template · version 1 · December 2025 · Oman Ministry of Transport, Communications and Information Technology (MTCIT)
September 13, 2026
Open official source ↗