Oman's telecom regulator has just told every business that texts, calls or messages customers with offers: get a clear yes first, or risk a fine of up to OMR 30,000. The rule was issued this month, and covered businesses have six months to bring their lists into line. If your WhatsApp broadcast list is really just everyone who has ever messaged your shop, this is the week to sort that out.
What changed this week
The Telecommunications Regulatory Authority (TRA), the regulator for phones and messaging in Oman, issued a new regulation covering promotional and service calls, messages and value added services (things like ringtone or subscription services billed through your phone credit). It came into force around 16 August 2026, and it applies to licensed telecom operators, aggregators and the businesses and service providers who use those channels to reach customers.
The headline rule: businesses need the explicit consent of a person before sending them a commercial message through any medium. There is an exception where an existing relationship already makes it clear the person would not object, for example a customer who ordered from you last week getting a delivery update. But that exception covers service messages, not open-ended marketing blasts.
- Promotional calls and messages are only allowed between 8am and 9pm Oman time.
- The sender's name shown to the customer must match the real business or trade name, no disguised numbers.
- Every message or call must offer a clear, working way to opt out, and providers must let customers reactivate later if they change their mind.
- Fines range from OMR 500 to OMR 30,000 depending on the breach, doubling for a repeat offence within a year.
Covered entities have six months from issuance to comply, which puts the deadline around mid February 2027. That sounds far off. It is not, if your list has never been sorted.
What counts as consent
This regulation sits on top of Oman's Personal Data Protection Law, which has applied since February 2023 and has been fully enforceable since its compliance grace period ended in February 2026. That law already says you need a lawful reason to hold and use someone's name and phone number, and consent is the main one small businesses rely on. Chatbot.OM's own guide to the rules for chat in Oman walks through the same consent basics if you want the fuller picture.
For a small business, the practical line is simple. Someone giving you their number to place an order, book an appointment or ask a question is not the same as them agreeing to receive your Eid sale offers every few weeks. The first is service. The second is marketing, and marketing needs a real yes.
A customer messaging you once to ask a question did not sign up for your broadcast list.
What opt-in looks like in a real shop or chat
Consent does not need a form or a lawyer. It needs one honest line, said or typed, that the customer clearly answers.
- At the till or counter: "Can we WhatsApp you when new stock or offers come in? You can say stop anytime." Wait for a yes.
- In a chat conversation: after helping with an order, ask "Would you like to be on our offers list too?" rather than adding every chat contact automatically.
- On a booking form: a separate tick box for marketing messages, not bundled into the box that confirms the appointment.
- Keep a simple record: a name, a number, the date they said yes, and how (in person, on WhatsApp, on the form). A notebook works. A spreadsheet is better.
A chat tool that logs every conversation, like Chatbot.OM, can save that yes against the customer's number the moment they type it, so you are not relying on memory six months later when someone asks how they ended up on your list.
Sort your list before you send
| Group in her phone | How many numbers | Can she send a marketing offer? | This week's action |
|---|---|---|---|
| Said yes at checkout or in chat, on record | 180 | Yes | Keep messaging, keep the log |
| Ordered or asked a question once, never asked about offers | 240 | No, not yet | Ask permission next time they message, don't add automatically |
| Placed an order in the last 30 days | 60 | Service updates only, not promotions | Send delivery or order status, save marketing for after they opt in |
| Old numbers from a raffle box, no consent record at all | 20 | No | Delete, or send one message asking permission and keep only the yes replies |
Run the same sort on your own numbers this week. If a complaint about unwanted messages ever reaches the TRA, the fine sits between OMR 500 and OMR 30,000 depending on the breach, per the regulation, regardless of how small the business is. A clean list of 180 real yeses is worth more than a messy list of 500.
I used to message everyone who ever ordered. Now I only message the ones who said yes, and nobody has ever complained.
What this means for you
Treat your WhatsApp broadcast list, your SMS list and your customer database as the same list, because the same consent rule now applies to all of it in spirit, even where the regulation's letter is aimed at telecom channels. Stop adding numbers to a marketing list just because someone messaged you once.
Build the habit of asking, and recording the answer, from today. If your business already runs a decent-sized offers list built the old way, spend the next six months turning it into one you can defend: ask each contact once, keep the yeses, drop the rest. Waiting until February 2027 to start means doing it under pressure.
Does this regulation cover WhatsApp specifically?
The regulation names calls, SMS and value added services delivered through telecom channels. It does not name WhatsApp directly, but the same explicit consent principle already applies to any customer data under the data protection law, so the safe move is to treat WhatsApp the same way.
Can I still message existing customers about their orders?
Yes. Service messages tied to an existing relationship, like order updates or appointment reminders, sit under the exception. It is unrelated marketing offers that need a clear yes.
What if a customer never replies to my consent question?
No reply is not consent. Leave them off the marketing list and keep serving them normally when they message you.
The bottom line
Oman's telecom regulator has made the direction unmistakable: ask before you broadcast, or pay for guessing wrong. Six months is enough time to sort a small business list properly, but only if you start this week rather than in January.
Sources checked for this article
- TRA Oman: Legal Framework, Laws and Regulations (oman-official)
- MTCIT: Personal Data Protection Law (oman-official)
- Muscat Daily: TRA sets time limits, tougher safeguards for marketing calls, SMS (media)
- Times of Oman: New telecommunications regulation protects consumer data and limits promotional messages (media)
- Oman Observer: Oman's TRA steps in to regulate unsolicited calls (media)
Practical information, not legal advice. Rules and dates were checked on 24 August 2026; verify current official positions before acting.
