Personal Data Protection Order, 2025 · s 65
Suggest a correction
Tell us what is wrong in this text. We check every suggestion against the official version before we change anything.
The text as we hold it
Open the official texts 65Regulations
The Minister may, with the consent of His Majesty the Sultan and
Yang Di-Pertuan, make such regulations as he considers necessary or expedient for giving effect to or carrying out the provisions of this Order, including the prescription of fees and other things required to be or which may be prescribed under this Order, and for the due administration thereof.
Without prejudice to the generality of subsection (1), the Minister may, with the consent of His Majesty the Sultan and Yang Di-Pertuan, make regulations for or with respect to all or any of the following matters -
63
fa} the form, manner and procedures, relating to the making and responding to requests under section 18 or 19, including the content of responses to such requests, the period for such responses, the circumstances in which an organisation may refuse to provide a response
BRUNEI DARUSSALAM GOVERNMENT GAZETTE or refuse to confirm or deny the existence of any matter and the fees that an organisation may charge in respect of such requests;
{b) the assessment and notification of notifiable data breaches, including-
the steps and measures that an organisation shall take in relation to the investigation and assessment of data breaches; and
the form and manner in which the Authority and affected individuals shall be notified of notifiable data breaches;
{c)
the classes of persons who may act under this Order for minors, deceased persons or any other individuals who lack capacity to act under this Order and regulating the manner in which, and the extent to which, any rights or powers of individuals under this Order may be exercised on their behalf;
{d) the form, manner and procedures relating to applications and complaints under this Order;
{e}
to provide for matters relating to the operation by an operator of a dispute resolution scheme, including -
the standards or requirements of the services provided under the dispute resolution scheme;
the fees that the operator may charge for the services provided under the dispute resolution scheme;
the records that the operator shall keep, and the period of retention of those records;
the reports that the operator shall submit to the Authority, and the manner and time for those submissions; and
generally to give effect to or for carrying out the purposes of section 34;
(fJ the conduct of reviews by the Authority under section 35;
{g} the form, manner and procedures for applications for reconsideration by the Authority under section 40;
64
65 8th. JANUARY, 2025
the form, manner and procedures for appeals to an Appeal
Committee, including the fees to be paid in respect of such appeals;
(i}
the award of costs of or incidental to any proceedings before the
Authority or Appeal Committee, and the award of expenses, including any allowance payable to persons in connection with their attendance before the Authority or Appeal Committee;
(j}
the fees to be paid in respect of applications, and services provided by or on behalf of the Authority, under this Order.