Oman’s Supreme Judicial Council and Public Prosecution have issued a combined public reminder confirming that unauthorized access to websites, information systems, or digital platforms constitutes a serious criminal offense. Governed by the newly enacted Law on Combating Cybercrime under Royal Decree No. 61/2026, the joint advisory is part of a proactive national effort to reinforce digital security regulations and safeguard data integrity. The authorities emphasized that cyber trespass, regardless of the perpetrator's intent, will face swift and strict legal prosecution.
Under Articles 5 and 7 of the revised law, criminal liability applies to any individual who deliberately infiltrates a website or information technology tool without official permission, intentionally exceeds their authorized access limits, or remains within a system after becoming aware that their access is unlawful. Base penalties for these foundational entry infractions include prison terms of up to six months, financial fines reaching 1,000 Omani Riyals (RO), or a combination of both statutory judgments.
The legal framework enforces substantially harsher, aggravated punishments if the unauthorized intrusion results in operational damage or data manipulation. Specifically, if a breach leads to the deletion, alteration, copying, destruction, encryption, or disclosure of stored electronic information, the judicial penalties sharply escalate. Stricter penalties are also triggered if the hack compromises sensitive personal data, targets users and beneficiaries, unlawfully appropriates a domain name, or is carried out by an individual exploiting their professional duties during the course of employment.
While the law introduces a formidable legal deterrent to protect the country's electronic infrastructure, it explicitly outlines targeted exceptions to maintain fair use and welfare oversight. No penalty will be imposed on parents, guardians, custodians, or caregivers who access an information system solely to protect the vital interests of a child or an individual lacking full legal capacity. Ultimately, the Public Prosecution has urged all citizens, residents, and organizations to strictly respect national digital boundaries and ensure all data interactions are conducted through verified, lawful channels.
