New personal data protection guidelines mandated for auditors
MUSCAT, JUNE 17
The Ministry of Transport, Communications and Information Technology (MoTCIT) has unveiled new standards and requirements for the accreditation of external personal data auditors in the Sultanate of Oman.
The document, issued in April of 2025, aims to' establish clear standards for the accreditation of external auditors to ensure high-quality, ethical, and lawful data audit services in Oman.' 'In light of the increasing challenges of personal data protection in the digital age, the importance of ensuring private sector institutions' compliance with relevant laws and regulations grows,' the Ministry said in the document.
This document provides the necessary technical and administrative standards for accrediting external auditors to ensure they possess the qualifications, methodology, and resources required to deliver high-quality and reliable audit services. This ensures their ability to conduct compliance audits for institutions (controllers and processors) to verify that personal data processing procedures are in accordance with the provisions of the Personal Data Protection Law and its executive regulations,' the Ministry added.
In order to qualify as external auditors, companies must adhere to several administrative, security and compliance, and quality assurance requirements.
In regards to administrative and technical standards, auditors are required to have an active commercial registration for no less than 12 months and possess the necessary licenses to operate in the Sultanate of Oman. In addition to holding essential certifications including ISO/IEC 27001 for Information Security Management and ISO/IEC 27701 for Privacy Information Management.
Furthermore, external auditing companies must have a qualified technical team with practical experience and recognized certifications such as ISO 27000 Lead Auditor or CISA, and CIPP. In addition to previous auditing experience, with a demonstrated and credible track record in providing auditing services.
Moreover, companies must maintain comprehensive documentation of procedures covering all audit phases (planning, execution, and reporting) in addition to a record retention policy of audit records, activities, results, and correspondence for no less than five years.
Finally, the regulations require a minimum Omanisation rate of 30% within the technical teams of companies.
In regards to security and compliance, the standard requires auditors to adhere to all laws and regulations related to personal data protection. Companies must also have comprehensive Data Protection and Confidentiality Policy, which outlines how data is managed and safeguarded against unauthorized access, modification, or disclosure Furthermore, companies must have the ability to conduct risk assessment audits and security gap assessments. They are also required to maintain an incident reporting policy, which clearly outlines the procedures for reporting any security incidents that occur during the audit process.
Finally, auditors are required to implement defined standards to regularly assess performance and ensure adherence to the required quality levels .
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Muscat Daily
34 minutes ago
- Muscat Daily
MTCIT invites EOI to develop office software locally in Oman
By OUR CORRESPONDENT Muscat – In an effort to enhance digital sovereignty and support technology localisation, Ministry of Transport, Communications and Information Technology (MTCIT) has invited expressions of interest (EOI) from local companies and investors to develop open-source office software. The ministry's Internal Investment Committee has called on Omani firms with expertise in software development to propose solutions for word processing, presentations and spreadsheets based on open-source platforms. The aim is to deploy these applications across government and institutional settings, meeting standard office software requirements. MTCIT said the government plans to sign a licensing agreement with the selected developer for a fixed term, as part of wider national efforts to build local technological capabilities and reduce reliance on foreign proprietary systems. Interested firms must submit a formal letter expressing their interest, along with a preliminary operational model of the proposed solution, company profile, commercial registration and valid business licence. A preliminary economic feasibility study and documents demonstrating experience and technical capability are also required. All submissions must be in PDF format and emailed to [email protected]. Submission deadline is July 20.
Muscat Daily
a day ago
- Muscat Daily
Oman targets bigger AI role in economy with new initiatives
Muscat – Oman is taking steps to increase the contribution of the artificial intelligence (AI) sector to its national economy by expanding the number of specialised start-ups and boosting research and investment in the field. Hassan bin Fida Hussain al Lawati, Head of National Programme for AI and Advanced Digital Technologies at Ministry of Transport, Communications and Information Technology (MTCIT), said the programme benefits economic, development and service sectors, directly impacting citizens' quality of life. He said the programme aims to increase the number of technology companies specialising in AI by 20% each year. The number of such companies now exceeds 25, up from fewer than ten at the programme's launch last year. Cumulative investments in AI projects have reached about RO60mn over the last four years, with annual investment expected to grow by 20%. Hassan bin Fida Hussain al Lawati In September 2024, the Council of Ministers approved the National Programme for AI and Advanced Digital Technologies as part of a broader strategy built on three pillars, the first of which is promoting AI adoption in economic and development sectors. The second focuses on localising AI technologies and developing national expertise to position Oman as a technology producer. The third pillar governs AI and digital applications with a human-centred approach to ensure ethical and effective use under flexible laws. Lawati noted that Oman moved up five places in the Oxford Insight Government AI Readiness Index, ranking 45th globally out of 193 countries in 2024, compared to 50th in 2023. It ranks fifth in the Middle East and North Africa and fourth in the Gulf. Oman aims to join the world's top 30 countries in this field, he added. He further informed that MTCIT, in partnership with University of Technology and Applied Sciences, launched an initiative called AI Makers to encourage work in the field and reward top researchers, scientific papers and projects in AI. MTCIT also introduced a competition called 'Engineer it with AI' to support local development in generative AI, enhance national skills and encourage innovation. The contest aims to boost economic returns by helping new start-ups and raising national performance indicators. In addition, an initiative called Humanising AI has been launched to maintain a balance between technical progress and the human aspect of service delivery, ensuring inclusivity for all groups in society.
Times of Oman
a day ago
- Times of Oman
Oman to enhance AI contributions to national economy
Times News Service Muscat: Oman is actively working to enhance the contribution of artificial intelligence (AI) to the national economy by increasing the number of specialised startups and expanding research and scientific investment in this vital field. In September 2024, the Council of Ministers approved the National Programme for Artificial Intelligence and Advanced Digital Technologies as part of a comprehensive strategic plan built on three main pillars: 1. Promoting the adoption of AI across economic and developmental sectors 2. Localising AI technologies by supporting homegrown solutions and developing national capabilities so that Oman becomes a producer and developer of digital technologies 3. Governing AI applications with a human-centric vision, creating a flexible regulatory environment that ensures the ethical and effective use of emerging technologies. Hassan bin Fada Hussein Al Lawati, Head of the National Programme for AI and Advanced Digital Technologies at the Ministry of Transport, Communications and Information Technology, highlighted that the programme benefits key economic, development, and service sectors that directly impact citizens' quality of life. In a statement to the Oman News Agency, Al Lawati noted that Oman advanced five spots in the Oxford Insights Government AI Readiness Index, ranking 45th globally out of 193 countries in 2024, up from 50th in 2023. Regionally, Oman ranks 5th in MENA and 4th among GCC states, with ambitions to join the global top 30. The programme targets a 20% annual increase in the number of AI-focused tech startups, which have already grown from fewer than 10 at the programme's inception to over 25 today. Cumulative investments in AI projects have reached approximately OMR60 million over the past four years, with plans to increase investment by 20% annually. The Ministry has also launched the 'AI Innovators' initiative in collaboration with the University of Technology and Applied Sciences to promote AI knowledge production and honor top researchers, scientific papers, and projects. Additionally, Al-Lawati mentioned the 'Engineer IT with AI' competition, designed to localise and encourage generative AI innovation, empower national talent, and increase economic returns through startup creation and performance benchmarks. A specialised initiative titled 'Humanising AI' has also been introduced to ensure a balanced approach that integrates technological empowerment with human-centred service delivery and inclusive access for all segments of society.
