What is the PDPL DSAR deadline?

Under Personal Data Protection Law (Royal Decree No. 6/2022) (PDPL), the standard response deadline is 30 days. The counting method is calendar days, starting from the day of receipt.

PDPL is enforced by Ministry of Transport, Communications and Information Technology (MTCIT). Maximum penalties: Up to OMR 500,000 (approx. USD 1.3M) for serious violations.

🇴🇲PDPL

Oman — PDPL DSAR Deadline Calculator

Q: Can I extend a PDPL deadline?

No. PDPL does not provide for deadline extensions under standard circumstances.

Calculate your exact response deadline under Personal Data Protection Law (Royal Decree No. 6/2022) (PDPL).

Configure your DSAR

Select jurisdiction, request type, and date — results update instantly.

Jurisdiction

Your deadline will appear here

Select a jurisdiction and request type to get started

PDPL Overview

Full Name

Personal Data Protection Law (Royal Decree No. 6/2022)

Effective Since

2023-02-13

Regulatory Authority

Ministry of Transport, Communications and Information Technology (MTCIT)

Official Text

View law

Maximum Penalties

Up to OMR 500,000 (approx. USD 1.3M) for serious violations

Request Types & Deadlines

Request Type	Deadline	Extension
Right of Access Art. 14 — Right to access personal data and obtain information about processing	30 days	Not available
Right to Correction Art. 15 — Right to request correction of inaccurate personal data	30 days	Not available
Right to Deletion Art. 15 — Right to request deletion of personal data	30 days	Not available
Right to Restrict Processing Art. 15 — Right to restrict processing of personal data	30 days	Not available
Right to Portability Art. 16 — Right to receive personal data in a structured format	30 days	Not available

Extension Rules

PDPL does not provide for deadline extensions under standard circumstances.

Special Rules & Common Mistakes

•Must respond to data subject requests within 30 calendar days
•No formal extension mechanism under the PDPL
•One of the most comprehensive data protection laws in the GCC region
•MTCIT is the supervisory authority for data protection
•Cross-border data transfer requires adequate protection in the recipient country
•Mandatory data breach notification to the authority and affected individuals
•Implementing regulations expected to provide further details

Compare with Other Jurisdictions

Law	Deadline	Method	Extension
🇴🇲 Oman PDPL	30 days	calendar days	No
🇪🇺 EU GDPR	1 months	calendar months	+2 months
🇬🇧 UK GDPR	1 months	calendar months	+2 months
🇺🇸 CCPA	45 days	calendar days	+45 days