New personal data protection guidelines mandated for auditors
MUSCAT, JUNE 17
The Ministry of Transport, Communications and Information Technology (MoTCIT) has unveiled new standards and requirements for the accreditation of external personal data auditors in the Sultanate of Oman.
The document, issued in April of 2025, aims to' establish clear standards for the accreditation of external auditors to ensure high-quality, ethical, and lawful data audit services in Oman.' 'In light of the increasing challenges of personal data protection in the digital age, the importance of ensuring private sector institutions' compliance with relevant laws and regulations grows,' the Ministry said in the document.
This document provides the necessary technical and administrative standards for accrediting external auditors to ensure they possess the qualifications, methodology, and resources required to deliver high-quality and reliable audit services. This ensures their ability to conduct compliance audits for institutions (controllers and processors) to verify that personal data processing procedures are in accordance with the provisions of the Personal Data Protection Law and its executive regulations,' the Ministry added.
In order to qualify as external auditors, companies must adhere to several administrative, security and compliance, and quality assurance requirements.
In regards to administrative and technical standards, auditors are required to have an active commercial registration for no less than 12 months and possess the necessary licenses to operate in the Sultanate of Oman. In addition to holding essential certifications including ISO/IEC 27001 for Information Security Management and ISO/IEC 27701 for Privacy Information Management.
Furthermore, external auditing companies must have a qualified technical team with practical experience and recognized certifications such as ISO 27000 Lead Auditor or CISA, and CIPP. In addition to previous auditing experience, with a demonstrated and credible track record in providing auditing services.
Moreover, companies must maintain comprehensive documentation of procedures covering all audit phases (planning, execution, and reporting) in addition to a record retention policy of audit records, activities, results, and correspondence for no less than five years.
Finally, the regulations require a minimum Omanisation rate of 30% within the technical teams of companies.
In regards to security and compliance, the standard requires auditors to adhere to all laws and regulations related to personal data protection. Companies must also have comprehensive Data Protection and Confidentiality Policy, which outlines how data is managed and safeguarded against unauthorized access, modification, or disclosure Furthermore, companies must have the ability to conduct risk assessment audits and security gap assessments. They are also required to maintain an incident reporting policy, which clearly outlines the procedures for reporting any security incidents that occur during the audit process.
Finally, auditors are required to implement defined standards to regularly assess performance and ensure adherence to the required quality levels .
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Observer
10 hours ago
- Observer
New personal data protection guidelines mandated for auditors
MUSCAT, JUNE 17 The Ministry of Transport, Communications and Information Technology (MoTCIT) has unveiled new standards and requirements for the accreditation of external personal data auditors in the Sultanate of Oman. The document, issued in April of 2025, aims to' establish clear standards for the accreditation of external auditors to ensure high-quality, ethical, and lawful data audit services in Oman.' 'In light of the increasing challenges of personal data protection in the digital age, the importance of ensuring private sector institutions' compliance with relevant laws and regulations grows,' the Ministry said in the document. This document provides the necessary technical and administrative standards for accrediting external auditors to ensure they possess the qualifications, methodology, and resources required to deliver high-quality and reliable audit services. This ensures their ability to conduct compliance audits for institutions (controllers and processors) to verify that personal data processing procedures are in accordance with the provisions of the Personal Data Protection Law and its executive regulations,' the Ministry added. In order to qualify as external auditors, companies must adhere to several administrative, security and compliance, and quality assurance requirements. In regards to administrative and technical standards, auditors are required to have an active commercial registration for no less than 12 months and possess the necessary licenses to operate in the Sultanate of Oman. In addition to holding essential certifications including ISO/IEC 27001 for Information Security Management and ISO/IEC 27701 for Privacy Information Management. Furthermore, external auditing companies must have a qualified technical team with practical experience and recognized certifications such as ISO 27000 Lead Auditor or CISA, and CIPP. In addition to previous auditing experience, with a demonstrated and credible track record in providing auditing services. Moreover, companies must maintain comprehensive documentation of procedures covering all audit phases (planning, execution, and reporting) in addition to a record retention policy of audit records, activities, results, and correspondence for no less than five years. Finally, the regulations require a minimum Omanisation rate of 30% within the technical teams of companies. In regards to security and compliance, the standard requires auditors to adhere to all laws and regulations related to personal data protection. Companies must also have comprehensive Data Protection and Confidentiality Policy, which outlines how data is managed and safeguarded against unauthorized access, modification, or disclosure Furthermore, companies must have the ability to conduct risk assessment audits and security gap assessments. They are also required to maintain an incident reporting policy, which clearly outlines the procedures for reporting any security incidents that occur during the audit process. Finally, auditors are required to implement defined standards to regularly assess performance and ensure adherence to the required quality levels .
Muscat Daily
10 hours ago
- Muscat Daily
Centre of excellence for semiconductors planned
By OUR CORRESPONDENT Muscat – The Ministry of Transport, Communications and Information Technology (MTCIT) has invited bids for consultancy services to help develop a national semiconductor ecosystem in Oman, including plans for a Centre of Excellence for Semiconductors and Electronic Chips. Specialised firms with experience in the semiconductor and electronic chip industry have been called to participate in the tender. The selected consultancy will advise on the creation of the centre and support wider efforts to position Oman as a regional player in this strategic sector. MTCIT said companies must demonstrate a strong track record in managing similar national and commercial projects in line with the scope outlined in the tender documents. The Centre of Excellence is central to the ministry's plan to strengthen Oman's place in the global semiconductor value chain. It will work to attract investments, support advanced chip design and manufacturing, and create high-skilled jobs in design, testing and research. The centre will also focus on technology transfer and localisation to build national capacity over the long term. Interested firms can register and purchase documents through the Tender Board's eTendering portal.
Observer
a day ago
- Observer
857-km final phase of Oman's longest dual carriageway begins
Oman has commenced the final construction phases of the dualisation of Sultan Said bin Taimour Road, a strategic highway that, once completed, will become the longest dual carriageway in the country. The road stretches from Oman's central desert to the southern Governorate of Dhofar and plays a vital role in enhancing national connectivity, economic integration and transport safety. The Ministry of Transport, Communications and Information Technology confirmed the start of construction on the third, fourth and fifth phases of the project. These segments span approximately 400 km and are being developed at a cost of over RO 258 million ($670m). The construction period for the three phases is expected to be 36 months. According to Said bin Mohammed Tabook, Director-General of Roads and Land Transport in Dhofar Governorate, the three sections will significantly improve travel efficiency between the central and southern regions of the country. He explained that phase three extends from the Wilayat of Haima to the Wilayat of Muqshin and covers 132.5 km. Phase four begins in Muqshin and continues to the area of Dawkah, adding another 135 km. Phase five then links Dawkah to the Wilayat of Thumrait, also with a length of 132.5 km. These final phases are part of a broader national infrastructure initiative to upgrade the Sultan Said bin Taimour Road to a dual carriageway, eventually bringing its total length to approximately 857 kilometres. This makes it the longest dual road in the country, serving as a critical transport corridor for both passenger vehicles and commercial freight, particularly during the annual khareef season when Dhofar sees a significant influx of domestic and regional tourists. The project is being implemented by a consortium of companies that includes both Omani and Saudi partners. The road has been designed to withstand Oman's variable desert climate, ensuring accessibility throughout the year. Eng Tabook stated that the road is not merely an infrastructure upgrade but a national integration project. He noted that it would significantly boost economic development by supporting the movement of goods and people across the country. The highway is also expected to facilitate overland logistics from Salalah Port and energy zones in the south to the industrial and commercial centres of the interior and northern Oman. The upgraded road will also improve access to remote communities in the governorates of Al Wusta and Dhofar, contributing to broader goals of economic inclusion and sustainable development. With more efficient transport links, Oman's southern governorate is positioned to emerge as a logistics and energy hub connecting the Arabian Sea to Gulf markets and beyond.
