Frequently Asked Questions
The DPA is the national independent authority established under the Data Protection Act No. 005 (2023) to protect personal data, uphold privacy rights and promote responsible data practices across all sectors.
Data controllers and data processors register with the Authority. You can start the process online on the registration page.
The Act provides rights of confirmation, access, correction and deletion (Art. 20), the right to withdraw consent (Art. 21), the right to object (Art. 22) and the right not to be subject to decisions based solely on automated processing (Art. 23).
Controllers must notify the Authority of a personal data breach within 72 hours of becoming aware of it. Use the online breach form.
Submit the online complaint form. You receive a reference number that you can use on the Track a Case page to follow progress.
A decision may be appealed as provided in the Act (Art. 39), and civil remedies are available under Art. 40. See the Act for the applicable time limits.
Email info@dpa.gov.so or call 452 (Sat–Thu, 08:00–16:00), or use the contact form.
Still have a question? Contact us →