Operate supervision + enforcement + penalties + DPO designation per Oman PDPL Articles 29-32. Supervisory authority (MTCIT) exercises powers including investigation + audit + corrective measures + administrative fines + suspension of processing + criminal referral for serious violations per Article 29. Enforcement and penalties include (a) administrative fines up to OMR 500,000 for serious violations + (b) criminal penalties for specified violations per Article 31 including imprisonment up to 5 years + (c) civil compensation rights for affected individuals. DPO designation per Article 30 is required for (a) public authorities + (b) controllers whose core activities consist of regular and systematic monitoring of data subjects on a large scale + (c) controllers whose core activities consist of processing of sensitive personal data on a large scale + with DPO independence + reporting line to highest management + sufficient resources + tasks defined. Maintain cooperation with supervisory authority + responsive to information requests + audit cooperation + with documented compliance programme.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.