The Telecommunications Regulatory Authority of Oman has made a decision to protect people’s privacy and stop fake telecommunications activities.
They have created a set of rules for companies that send messages, service messages and extra services. This is under Decision No. (1511/25/2/36/2026).
The Telecommunications Regulatory Authority of Oman is telling all the telephone companies, businesses and other people who work with them what they can and cannot do.
They have to follow these rules and the new rules say that companies can only make marketing calls and send text messages during the time between 8:00 a.m. To 9:00 p.m..
This means that people in Oman will not get these messages at night or early, in the morning when they are trying to rest. The Telecommunications Regulatory Authority of Oman is doing this to help the people of Oman. The Telecommunications Regulatory Authority of Oman wants to make sure that people are not bothered by these messages at the time.
Beyond time constraints, the framework introduces stringent data protection protocols. Telecom licensees and corporate entities are explicitly barred from transferring or sharing customer details with local subscribers, overseas entities, or foreign intermediary networks without obtaining prior regulatory authorization from the TRA.
Operators must also deploy advanced technical and organizational measures to preserve data confidentiality and mitigate potential cyber vulnerabilities.
To curb rising cases of spoofing and electronic impersonation, the directive obliges service providers to use verified sender identifiers matching their registered trade names.
Furthermore, operators must secure official approval before engaging with international message-exchange intermediaries, ensuring strict identity verification for incoming messaging streams. Subscribers will now benefit from mandatory, simple opt-out mechanisms to block unwanted promotional streams, alongside centralized channels to report non-compliant vendors.
The regulation also establishes firm control over value-added and recurring subscription services, ensuring transparent opt-in protocols before fees are charged. To enforce compliance, the TRA has established a tiered penalty system.
Fines for non-compliance range from OMR 500 up to OMR 30,000 based on the severity of the infraction, with steeper financial repercussions reserved for recurring violations. The updated policy reflects the regulator’s strategy to modernize Oman’s digital landscape while striking a balance between commercial outreach and public privacy rights
