Ministerial Decision No. 499/2023 issuing the Electronic Commerce Regulations and the Consumer Protection Law adopted by Royal Decree No. 66/2014 establish a comprehensive framework for consumer protection that also applies to online transactions.
While the Consumer Protection Law has been in force since 2014 and did not provide a comprehensive consumer protection regime applicable to electronic transactions, the Electronic Commerce Regulations introduce e-commerce-specific obligations, including requirements to provide accurate information on goods or services, data protection measures, complaint-handling procedures, contact and customer service details, replacement and return policies, and the terms and conditions of use of the online store (Art. 9). In addition, e-commerce operators must provide clear mechanisms for correcting errors in orders before delivery or shipment (Art. 11), as well as a means for consumers to request the suspension of electronic notifications (Art. 12).

It is reported that Oman, through its government's majority-owned telecommunications service providers and telecommunications regulators, periodically slows or blocks access to certain over-the-top services such as Voice over Internet Protocol (VoIP) services.

The indicator "7.2.4 - Government Internet shut down in practice" of the V-Dem Dataset, which measures whether the government has the technical capacity to actively make internet service cease, thus interrupting domestic access to the internet or whether the government has decided to do so, has a score of 3 in Oman for the year 2024. This corresponds to "Rarely but there have been a few occasions throughout the year when the government shut down domestic access to Internet."

According to Art. 2 of Telecommunications Regulatory Authority (TRA) Decision No. 1152/2/19/2024-20, no entity may establish, operate or provide cloud computing or data centre services without first obtaining a licence, except for those already licensed to provide fixed public telecommunications services. Under Art. 6, such licences are valid for three years and may be renewed, subject to continued compliance with the applicable regulatory requirements.

Pursuant to Art. 9 of the Media Law, any natural or legal person intending to engage in specified media activities must obtain a licence from the Ministry of Information, in accordance with the conditions, procedures and rules laid down in the Law and its implementing regulation. These activities include (i) operating news websites and news accounts and (ii) retransmitting any media activity within the country.
It is reported that both local and international media entities are required to secure licenses from the Ministry of Information and must comply with established regulations.

According to Art. 3 of Telecommunications Regulatory Authority Regulation No. 1152/2/19/2024-12, the commercial importation of communications equipment is prohibited unless a prior permit has been obtained from the Ministry of Transport, Communications and Information Technology. Pursuant to Art. 7 of the Regulation, applications for such licences must be submitted to the Authority using the prescribed form. The products concerned reportedly include screens, devices connected to data-processing and network equipment, telephones and other telecommunications devices, as well as audio, image or data transmission and reception equipment and GPS positioning devices.

Art. 20 of the Personal Data Protection Law explicitly mandates data controllers to appoint a Data Protection Officer (DPO). Art. 34 of the Executive Regulations for the Personal Data Protection Law further stipulates that the appointment of a DPO must adhere to specific criteria. Art. 35 delineates the duties of the DPO, which include offering recommendations and guidance on fulfilling obligations under the Law and its Executive Regulations, monitoring the implementation of policies related to personal data protection, ensuring compliance with legal and regulatory requirements, and liaising with the Ministry of Transport, Communications, and Information Technology on issues pertaining to personal data processing.

The Electronic Transactions Law establishes a safe harbour regime for intermediaries for copyright infringements. According to Art. 14.1 of the law, an Intermediary shall not be held responsible civilly or criminally for any information received in the form of electronic records concerning a third party if the Intermediary is not the originator of such information and his role is restricted to providing access to such information if such responsibility arises on:
(a) Originating, publishing, or distributing such information or any data included therein.
(b) Trespassing on any of the personal rights related to such information.
For absolving the Intermediary from responsibility based on the above, the following shall be ascertained:
(a) He has no knowledge of any facts or circumstances, in the ordinary course of things, capable of creating criminal or civil responsibility; and
(b) In case of his knowledge of any of the above, he has immediately removed all information from any information system under his control and stopped access to or display of such information.

The Electronic Transactions Law establishes a safe harbour regime for intermediaries beyond copyright infringements. According to Art. 14.1 of the law, an Intermediary shall not be held responsible civilly or criminally for any information received in the form of electronic records concerning a third party if the Intermediary is not the originator of such information and his role is restricted to providing access to such information if such responsibility arises on:
(a) Originating, publishing, or distributing such information or any data included therein.
(b) Trespassing on any of the personal rights related to such information.
For absolving the Intermediary from responsibility based on the above, the following shall be ascertained:
(a) He has no knowledge of any facts or circumstances, in the ordinary course of things, capable of creating criminal or civil responsibility; and
(b) In case of his knowledge of any of the above, he has immediately removed all information from any information system under his control and stopped access to or display of such information.

It is reported that Oman imposes an identity requirement for SIM registration. Anyone wanting to purchase a SIM card has to provide their national ID card or a passport in case of foreigners to activate a new prepaid SIM card.

It is reported that media imports are subject to censorship by the Ministry of Heritage, Culture and Sport for morally or politically sensitive material. The Ministry of Information delays or bars publications of content it deems morally suspect or politically sensitive. Since 2021, Oman has blocked Clubhouse because it does not have a permit.

Trade secrets and other undisclosed information are protected under the Law on Industrial Property Rights (Arts. 60.1(b), 65.1 and 65.2) and its Implementing Regulation (Regulation No. 105/2008), which prohibit the unfair commercial use and disclosure of undisclosed information, including regulatory test data, as acts of unfair competition. In addition, Part IV of the Law on Industrial Property Rights sets out the infringement proceedings and remedies applicable to acts of unfair competition, including those involving the misuse or disclosure of trade secrets and other forms of undisclosed information.

There is no obligation for passive infrastructure sharing in the country to deliver telecom services to end users. However, it is practiced in the mobile sector and in the fixed sector based on commercial agreements.

It is reported that Omantel, the leading telecommunications company in the country, remains under majority government ownership, with the government holding a controlling stake of 51%.

Under TRA Decision No. 26/2016 issuing the Regulations on Accounting Separation, Oman requires accounting separation for operators with significant market power (SMP) in the telecommunications market. In addition, it has been reported that functional separation is also mandated in the country; however, no explicit legal provision establishing such an obligation could be identified in publicly available sources online.