Contributed By Al Busaidy, Mansoor Jamal & Co (AMJ)
The Banking Law (Royal Decree 2/2025, replacing Royal Decree 114/2000, the previous banking law) is the primary banking legislation in Oman. The Central Bank of Oman (CBO) is the designated regulator of the banking sector. Pursuant to its powers under the Banking Law, the CBO has issued a number of regulations, circulars and directives, all of which, collectively with the Banking Law, regulate the banking sector in Oman.
Banks in Oman may also engage in various activities relating to the field of securities, which are regulated by the Financial Services Authority (FSA). The principal laws governing the provision of services relating to the field of securities include the Securities Law (Royal Decree 46/2022) and the Executive Regulations of the Capital Market Law (CMA Decision 1/2009) (the “Executive Regulations”). The Securities Law repealed the earlier Capital Market Law, however the Executive Regulations issued under the earlier Capital Market Law are still in force until such time as new regulations under the Securities Law have been issued.
The Banking Law and regulations apply to locally incorporated banks (to be Omani listed companies) as well as foreign banks incorporated in other jurisdictions that are granted a licence to establish a branch in Oman. Application for setting up a new bank in Oman (whether a local bank or a branch of a foreign bank) is a two-stage process.
Application Process
Stage 1
Stage 1 involves the sponsor submitting an application for the granting of a licence to establish the proposed bank in Oman. This entails submission to the CBO of:
Following receipt of an application with all the supporting documents, the CBO is required to make a decision in relation to the application for a banking licence within 90 days of completion of the application (previously 120 days). This also applies in relation to licence applications for bank branches. A lack of response from the CBO within the 90-day period is now deemed to be an acceptance of the application, rather than a rejection, as previously.
A foreign bank that is not licensed in Oman may now open a representative office, provided it obtains a licence from the CBO to do so, pays the requisite fee, and only if:
Stage 2
Following notification by the CBO of its approval of a licence application, the applicant has 360 days within which to commence operations. If the applicant does not commence banking business within that time period, its licence will automatically be revoked unless the CBO agrees to extend this period.
One of the key tasks during Stage 2 is for the applicant to complete its corporate structuring formalities, which include incorporating the company (or registering the foreign entity) in Oman and completing all related formalities. As banks are required to be public joint stock companies, the process of an initial public offering must also be completed.
Other key tasks include leasing premises where the bank proposes to undertake its banking business, and obtaining all the necessary clearances from the municipality concerned and the Royal Oman Police. Once all the conditions required by law have been fulfilled, the bank may commence banking operations.
Types of Licence
The CBO issues banks with a commercial banking licence which authorises the licensed bank to undertake all banking activities and functions within the meaning of “banking business” as defined in Article 49 of the Banking Law (with the exception of Islamic banking, digital banking and investment banking activities, for which, in each case, a separate licence is required).
Investment banking
Licensed banks require prior approval from the CBO if they intend to carry out investment banking activities with regard to securities. This could include financing companies providing project advisory services, investment brokerage, investment advisory services, investment management, underwriting of stock issues, trust or fiduciary services, and brokerage activities. These all constituted investment banking activities under the previous legislation, with regard to which, the Banking Law clarifies that the licensed bank must obtain the prior approval of the CBO before obtaining a licence from the FSA for the conduct of any securities-related activities regulated by the FSA.
Digital banking
The Banking Law defines a digital bank as being a licensed bank conducting banking business through digital platforms or channels using modern technological techniques. It further provides that digital banks are regulated by the CBO pursuant to provisions yet to be issued by the CBO. The regulatory framework for digital banks allows for a 90-day period for the CBO to approve or reject an application, with the establishment process needing to be completed within one year of in-principle approval.
Islamic banking
The Banking Law sets out a framework for Islamic banking in Oman, including provisions relating to licensing, governance (in accordance with Sharia principles), and financial instruments such as sukuks. The Banking Law changes very little of the regime previously applicable to Islamic banking business, with the following exceptions.
As noted above, a separate Islamic banking licence issued by the CBO allows a bank to provide Islamic banking products and services to its customers within the regulatory regime of the Islamic Banking Regulatory Framework (IBRF) issued by the CBO.
With regards to investment banking, CBO Circular BM 720 and Regulation BM/REG/38/04/94 (the “CBO Investment Banking Regulations”) provide a framework for regulating certain “investment banking” activities, as listed in the CBO Investment Banking Regulations, which may be undertaken by banks subject to obtaining an investment banking licence.
Article 4 of the CBO Investment Banking Regulations provides for “investment banking activities” to comprise the following, for which an investment banking licence will be required:
In this respect, there is some overlap between activities that fall within the domain of “investment banking”, which is regulated by the CBO, and activities in the “field of securities”, which are regulated under the Securities Law by the FSA. The following activities, as set out in Article 21 of the Securities Law, require a licence from the FSA:
Should there be any overlap between the CBO and FSA in respect of an activity that a licensed bank intends to undertake, the bank is required to obtain the necessary licences from both the CBO and FSA before undertaking such activities.
Banking Law Restrictions
All local banks in Oman are required to be established as public listed companies (unless they have a specific exemption, pursuant to a Royal Decree). The Banking Law (Articles 68 to 71) provides a number of restrictions on the transfer of shares in banks, as summarised below:
Limits on Shareholdings
Additionally, the CBO has established the following limits on shareholdings by an individual or corporate entity and its related parties in a bank:
If a proposed transaction results in the merged entity acquiring more than 35% of the market share of the relevant business sector, then it will be necessary to secure a competition/merger approval from the Ministry of Commerce, Industry and Investment Promotion, which regulates competition matters under the Competition Law (Royal Decree 67/2014).
The Takeover Code
As most banks in Oman are Omani listed companies, any acquisition of more than 25% of the shares of a listed company would trigger the Omani Takeover Code (CMA Decision 2/2019). In terms of the letter of the law, the Takeover Code provides that any acquisition of more than 25% of the shares of a listed company may only be effected through a mandatory tender offer (MTO) which is made to all shareholders of the company. The Takeover Code does not recognise any concept of a direct block transfer/sale of shares and instead requires that the MTO is made to all the shareholders so they can acquire shares on a pro rata basis, and so that if a buyer intends to acquire 51% of the shares in a bank held by a certain shareholder, it will need to make an offer to acquire a higher percentage of shares, in order to allow for a margin to cater for acceptances by shareholders other than the primary selling shareholder. Having noted the above, in a number of precedent deals in Oman, the FSA has provided exemptions to acquirers from the requirements of an MTO set out in the Takeover Code, and has also permitted acquirers to enter into direct bilateral deals of more than 25% shareholding.
Pursuant to CBO Circular BM 932, the CBO has prescribed a Code of Corporate Governance for Banking and Financial Institutions which sets out the principles of role, responsibility and accountability of the board of directors and senior management of licensed banks operating in Oman. In the case of a branch of a foreign bank operating in Oman, such branch would not have a board of directors and accordingly, the provisions relating to boards of directors would not be applicable, although the provisions relating to the CEO/manager will be applicable.
In addition to the above, all public listed companies are required to comply with the Code of Corporate Governance for Listed Companies (CMA Decision 27/2021) (the “Code”), which is a comprehensive code on corporate governance. The Code is binding on all public listed companies and, as locally incorporated banks operating in Oman are public listed companies (with one exception), the CBO has specifically directed listed banks to comply with the provisions of the Code. In summary, the Code provides a legal framework and clarifies the principles for the management and control of listed companies and, among other things, outlines the composition of the board and its committees, as well as the functions and powers attributed to them.
In accordance with the Banking Law, a licensed bank’s CEO and other senior management staff can only be employed by the bank if such appointment has been approved by the CBO, and the proposed personnel satisfy the CBO’s “fit and proper” criteria, outlined below.
“Fit and Proper” Criteria
CBO Circular BM 954 provides that the CBO requires licensed banks to ensure, before seeking the CBO’s approval for the appointment of senior management members, that the proposed appointee meets the following “fit and proper” criteria:
In addition to the above, licensed banks are required to look into the previous conduct and activities in business and financial matters of the proposed appointee and take into account other positions held by such person, as well as consider their financial solvency, qualifications, experience and expertise in the relevant position they are proposed for.
Other Documentation
The process of obtaining the CBO’s approval involves submitting the CBO’s prescribed application form along with the profile/CV of the proposed appointee, together with supporting documentation (which includes undertakings from the bank as well as the proposed appointee regarding the appointee’s experience/qualifications, etc). In the case of the incorporation of a new bank, the appointment applications must be submitted to the CBO at the same time as the banking licence application. In all subsequent cases, applications are submitted as and when a vacancy arises which has to be filled.
The CBO has the discretion to reject any proposed appointee or to displace any director, executive officer, general manager or deputy general manager by passing a direction in the interests of depositors and customers of the bank.
Omanisation Targets
Furthermore, in accordance with CBO Circular BM 1105, banks are also required to achieve and maintain the following Omanisation targets in each cadre of staff, in addition to achieving the overall Omanisation target of 90%:
Through Circular BM 1135, the CBO has issued instructions to all banks operating in Oman to comply with the “Sound Compensation Principles and Standards” issued by the Financial Stability Board (FSB) regarding the reward/compensation of senior management. The Circular provides that, in order to protect the financial stability of banks, to avoid losses likely to arise from giving excessive rewards to senior management, and to streamline the applicable processes, it is necessary for banks to strike a balance between risks and rewards. All banks are required to have a remuneration committee of the board of directors in order to decide on the remuneration of senior management in line with the FSB’s “Sound Compensation Principles and Standards”, without the need for the CBO’s involvement.
With respect to branches of foreign banks, the circular states that foreign banks should review their policies/practices as required, however, it does not provide any other guidance.
It is also important to note the various limitations on remuneration payable to directors of listed companies (given that the majority of banks operating in Oman are listed companies). Article 129 of the CMA’s Executive Regulations for Listed Companies (MD 27/2021) (the “SAOG Regulations”) stipulate that the sitting fees of directors and subcommittees are to be approved at the company’s ordinary annual general meeting, provided that the sitting fees are not more than OMR10,000 for each director per annum.
With regard to directors’ remuneration, this can only be paid from the net profits of the company after the deduction of taxes, legal and optional reserves, and the funds allocated from the profits for capitalisation and dividends. Directors’ remuneration should also be approved by the ordinary general meeting, provided that:
The cornerstone legislation governing AML/CFT in Oman is the Anti-Money Laundering and Combating Terrorism Financing Law (Royal Decree 30/2016) (“AML/CFT Law”). The AML/CFT Law and the Executive Regulations of the AML/CFT Law (“AML Executive Regulations”) seek to counter money laundering and the financing of terrorism activities in Oman.
The AML/CFT Law applies to banks/financial institutions, non-financial businesses and professions and non-profit associations. Banks are obliged to retain records, documents, information and data relating to the identity of actual clients and beneficiaries, and their activities and transaction records, in a way that facilitates retrieval upon request in accordance with the provisions of the AML/CFT Law for a period of ten years commencing from the date of:
Upon request, a bank will provide these records and documents to the judicial authorities, the National Financial Information Centre and other regulatory bodies (including the CBO). Banks may keep authenticated copies of these records, documents, information and data. Under the AML/CFT Law, banks are obliged to notify the National Financial Information Centre immediately in the event of any suspicion, or existence of reasonable grounds for suspicion, that any funds routed through the bank relate to the proceeds of crime, money laundering or terrorism financing (“Proceeds of a Crime”). The AML Executive Regulations specify the records, documents, information and data that must be retained.
The AML/CFT Law and Executive Regulations set out a number of obligations regarding checks that a “covered institution” is required to undertake, namely:
Banks are not permitted to open anonymous accounts or accounts under assumed or fictitious names or numbers or codes and are not permitted to provide any services to such accounts. Banks are required to undertake the necessary due diligence to identify their clients, using reliable and independent sources, documents, data and information in the following cases:
It is also important to monitor all existing relationships and client transactions on an ongoing basis to ensure that information regarding such relationships is consistent with the client due diligence information held on file for that client.
The Bank Deposit Protection Law (Royal Decree 47/2024)
The Bank Deposit Protection Law (BDPL) was promulgated in October 2024 to replace the previous Bank Deposit Insurance Scheme. The BDPL sets out a framework for protecting deposits in both the conventional and Islamic banking sectors in the event of the default of a licensed bank or financial institution. One of the aims of the BDPL framework is to safeguard depositors and enhance public confidence in the financial system in Oman. Specialised funds and strict regulatory requirements ensure a safe environment for depositors, with all eligible deposits automatically covered under the system.
As noted by the CBO, the main objectives of protecting bank deposits include:
Further, the BDPL provides comprehensive protection cover for specific deposits with banks operating in Oman. It aims to compensate depositors without delay, especially those with relatively small savings. This has the effect of ensuring that the system operates to bridge the financing gap until the liquidation procedures in relation to the failed bank are finally resolved. The CBO supervises the system.
Eligibility of deposits
The accounts eligible for protection under the framework set out in the BDPL include savings deposits, current accounts, call deposits, time deposits, government deposits, deposits of trust funds and pension funds, or any other deposits of a similar nature, and any other deposits determined by the CBO.
The BDPL sets out a limit for insured eligible deposits, capped at OMR20,000 per depositor (although this limit may be amended by the CBO, according to prevailing economic and financial conditions). This limit applies to various types of accounts, covering individual and corporate depositors. If a depositor has more than one account with the same defaulting bank, the amounts deposited in all accounts eligible for coverage are aggregated to calculate the compensation amount. Accounts eligible for coverage in relation to the same depositor over different banks are dealt with independently, so the depositor could receive the maximum compensation amount of OMR20,000 from each bank.
Certain deposits are excluded from the coverage noted above, including deposits held by bank executives, external auditors and affiliated companies of the depositors. The payment of compensation to depositors must be made within seven business days of a bank’s liquidation or suspension, thus ensuring swift resolution for depositors.
Funds
The BDPL has established two independent funds: the Takaful Fund for the Protection of Deposits with Licensed Islamic Institutions (the “Takaful Fund”) and the Insurance Fund for the Protection of Deposits with Licensed Conventional Institutions (the “Conventional Fund”). Both funds have the same aim of compensating depositors in the event of a bank failure, with each fund initially capitalised at OMR10 million. The CBO contributes half of the capitalisation of each fund and the balance comes from licensed banks or Islamic financial institutions (as appropriate in relation to each fund).
The CBO will exercise ongoing regulatory oversight over both funds to ensure they remain adequately capitalised and properly managed. Financial institutions (in both the Islamic and conventional sectors) must also make annual contributions that are proportional to their total respective deposit balances to maintain the capitalisation of the funds. Additionally, the Takaful Fund is required to comply with Sharia principles, in managing its affairs and investing its funds (including the operation of this fund being subject to Sharia audit by independent auditors appointed by the CBO’s Board of Governors.
Management
The BDPL sets out strict governance standards for both funds. A management committee is appointed by the CBO and is responsible for overseeing each fund’s operations. Regular audits and annual reporting requirements have been introduced to maintain transparency. Fund performance reports must also be made available to the public on a regular basis.
Licensed financial institutions are subject to various penalties for non-compliance, including fines, suspensions, or removal from the commercial registry. Where financial institutions do not make any required fund contributions, the CBO is authorised to deduct overdue amounts from their accounts held with the CBO or to impose fines.
Basel III Standards
The CBO has directed all banks to comply with the Basel III Standards and has issued a number of circulars and guidelines on adherence to and compliance with the various requirements prescribed by the Basel III Standards (eg, the Net Stable Funding Ratio (NSFR)). Through CBO Circular BM 1147 and the Basel III Net Funding Ratio Guidelines issued by the CBO, the CBO has directed all banks in Oman to comply with the NSFR disclosure requirements, as set out in the Circular. The CBO’s Guidelines provide guidance on the NSFR with the objective of reducing funding risk over a longer time period by requiring banks to fund their activities with sufficiently stable sources of funding. Section 2 of the Guidelines provides minimum requirements, definitions, etc. Section 3 discusses application issues for the NSFR, such as scope of application, implementation date, etc. The disclosure requirements for the NSFR are set out in Section 4 of the Guidelines, including a common template the banks must use to report their NSFR results and selected details of the NSFR components.
See the section on “Capital Requirements and Capital Buffers” below for more information regarding the capital requirements set out in the Basel III Standards.
Risk Management Rules
CBO Circular BM 955 requires all banks operating in Oman to comply with CBO’s Guidelines on Risk Management Systems. The Guidelines broadly cover management of credit, the market and operational risks. Due to diversity and the varying size of balance sheet items, it may not be possible or necessary for all banks to adopt uniform risk management systems. The design of a risk management framework is required to be orientated towards the bank’s own specific requirements, dictated by the size and complexity of its business, risk philosophy, market perception and the existing level of capital. The Guidelines are purported to serve as a benchmark for banks, which are yet to establish integrated risk management systems. Banks are permitted to develop their own systems compatible with the type and size of their operations as well as their risk perception.
Capital Requirements and Capital Buffers
Through CBO Circular BM 1114, the CBO has directed all banks to comply with the CP-1 Guidelines on Regulatory Capital Under Basel III and CP-2 Guidelines on the Composition of Capital Disclosure Requirements. Banks are required to implement the capital adequacy framework under Basel III. The Basel III framework is applicable to all banks at consolidated bank level, as well as at standalone level.
Multinational banks are required to follow the more stringent of the regulations between those of the home jurisdiction and the host jurisdiction. Banks are required to ensure a total capital adequacy ratio of 12% of risk-weighted assets. Of this, Common Equity Tier 1 capital should be maintained at a minimum level of 7% and Tier 1 capital at a minimum of 9% of risk-weighted assets. A capital conservation buffer of 2.5% of risk-weighted assets, comprised of Common Equity Tier 1, is in addition to the minimum Total Capital Adequacy ratio. The counter-cyclical buffer, if required, is at a maximum level of 2.5%.
Furthermore, through CBO Circular BM 1140, the CBO has directed all banks in Oman to comply with the Concept Paper on Capital Buffer Requirements under Basel III, issued by the CBO. The Concept Paper provides, among other things, a capital conservation range table (including a counter-cyclical buffer), instructions on the release of the buffer, treatment of surplus when the buffer returns to zero, calculation of the buffer requirement, calibration of thresholds, performance of variables for signalling release of the buffer, etc.
Liquidity Requirements
Pursuant to CBO Circular BM 1127, the CBO has directed all banks in Oman to comply with the framework on Liquidity Coverage Ratio (LCR) and LCR disclosure standards. The standard LCR became effective from 1 January 2015, with a minimum ratio of 60% which increased by 10% every year until it reached a minimum of 100% in 2019. The LCR is still understood to be at 100%.
The objective of the LCR is to promote the short-term resilience of a licensed bank’s liquidity risk profile by ensuring that it has sufficient high-quality liquid assets (HQLA) to survive a significant stress scenario lasting for 30 days.
The CBO has issued the Bank Resolution Framework (BRF), which is part of the overall regulatory and supervisory architecture of the CBO, and which has the aim of preventing a bank from reaching a phase of failure or resolution in the first instance. The BRF charts out prompt corrective actions to be taken by a bank if the capital conservation buffers are drawn down, or if there are weaknesses in liquidity, asset quality or other aspects of operation. The BRF further provides a mechanism for an institution-initiated recovery plan if the bank hits certain thresholds. Lastly, if the recovery plan fails, the BRF provides a resolution toolkit for the orderly exit of the bank, with the aim of avoiding excessive market disruption and ideally avoiding the need for any capital support from the government (other than in its capacity as a shareholder), all while at the same time preserving critical functions once it is clear that the institution is no longer viable.
The BRF has been prepared in line with the Financial Stability Board (FSB) Key Attributes of Effective Resolution Regime, which is a global standard in respect of bank recovery/resolution processes.
Pursuant to the Banking Law, the CBO is the resolution authority for all banks in Oman and it retains the power to adopt and implement any resolution measures in respect of banks licensed by it. A resolution event may be triggered if:
A resolution event may also be triggered due to any systemic event which requires immediate action by the CBO. Such events could include circumstances where a bank or group of banks is unable to provide the products or services that they have contractually undertaken to provide; or if there is an actual or perceived loss of confidence in the ability of one or more banks or the financial system to continue to provide financial products or services (to an extent that could have a substantial adverse effect on the financial system and economic activity in Oman, irrespective of the event or circumstance occurring or arising inside or outside of Oman).
Article 9 of the BRF provides that the general principle to be applied in any resolution process is that “no creditor will be left worse off” than they would have been under the usual insolvency/liquidation regime.
The BRF, read with Article 230 of the Banking Law, provides that in the event of a resolution process, priority of payments will be as follows:
As of the date of publication of this Practice Guide, the CBO has not issued any regulatory requirements or guidelines in relation to ESG. However, the MSX recently issued its environmental, social and governance (ESG) guidelines (the “ESG Guidelines”). The ESG Guidelines are applicable to all listed companies and therefore apply to the majority of banks operating in Oman. The ESG Guidelines align with the Gulf Cooperation Council’s GCC ESG Disclosure Metrics for listed companies published in 2022.
The ESG Guidelines encourage listed companies to voluntarily report on their ESG performance and compliance in 2024 for all ESG-related activities undertaken in 2023. Reporting is mandatory for all listed companies from the year 2025 onwards and the mandatory reports for activities undertaken in 2024, for example, had to be filed by 31 March 2025 at the latest.
As per the ESG Guidelines, the business case for ESG reporting includes several factors, such as meeting investor demands, achieving operational improvements, complying with an evolving regulatory environment, enhancing financial performance, improving reputation, and maintaining effective risk management.
The ESG Guidelines provide 30 measures to assess a listed company’s impact on environmental sustainability, social responsibility and governance matters. These measures include matters such as board diversity, labour practices, carbon emissions, etc.
From 2025 onwards, listed companies will be required to publish standalone ESG reports according to the Global Reporting Initiative (GRI) Universal Standards. These reports will be required to document changes in any performance measures, such as diversity at various institutional levels, etc.
DORA requirements are not applicable to Omani licensed banks.
Regulatory reforms are expected in the areas of capital markets and banking, with new regulations governing banking, sovereign debt and capital markets expected to come out in 2026. At this point in time, the most anticipated regulations are the new executive regulations of the Securities Law, which are expected to replace the current prevailing regulations issued under the now-repealed Capital Market Law. The new executive regulations of the Securities Law are expected to address, among other things, the specific activities or persons that do (or do not) require regulatory licences from the FSA, as well as those activities that FSA-licensed entities are prohibited from conducting. Given that most banks in Oman also undertake and provide various services in the field of securities, the executive regulations of the Securities Law are expected to be a major regulatory development for banks, once the said regulations are issued.
In terms of other regulatory developments, in 2024 the FSA circulated the new bonds and sukuk regulations. It is expected that the new regulations will focus on building up the regulatory infrastructure of the financial sector to cope with the current requirements of the Omani market through diversification of investment and financing instruments. The regulations are also anticipated to be aligned with the objectives of Oman’s Vision 2040. According to the FSA, the key strategic objectives of issuing the new regulations will be to help enable flexible and convenient financing arrangements (both conventional and Islamic), in line with prevailing global norms.
A draft Open Banking Regulatory Framework was approved for public consultation in July 2024. This is a very important part of the process of technological development and innovation in the financial sector. Its main aim is to set up interfaces between banks and third-party providers and it includes regulations on data security and authentication.
Commencing in 2026, licensed banks will be required to disclose climate-related risks. This reflects a global shift towards decarbonisation and the potential impact on Oman’s hydrocarbon-reliant sectors.
Muscat International Centre
Central Business District
Bait Al Falaj Street
Muscat
Sultanate of Oman
+968 2482 9200
+968 2481 2256
info@amjoman.com www.amjoman.com