Skip to content
Back to the text

Personal Data Protection Order, 2025 · s 65

Suggest a correction

Tell us what is wrong in this text. We check every suggestion against the official version before we change anything.

What is wrong?

The text as we hold it

Open the official text

s 65Regulations

(1)

The Minister may, with the consent of His Majesty the Sultan and

Yang Di-Pertuan, make such regulations as he considers necessary or expedient for giving effect to or carrying out the provisions of this Order, including the prescription of fees and other things required to be or which may be prescribed under this Order, and for the due administration thereof.

(2)

Without prejudice to the generality of subsection (1), the Minister may, with the consent of His Majesty the Sultan and Yang Di-Pertuan, make regulations for or with respect to all or any of the following matters -

63

fa} the form, manner and procedures, relating to the making and responding to requests under section 18 or 19, including the content of responses to such requests, the period for such responses, the circumstances in which an organisation may refuse to provide a response

BRUNEI DARUSSALAM GOVERNMENT GAZETTE or refuse to confirm or deny the existence of any matter and the fees that an organisation may charge in respect of such requests;

{b) the assessment and notification of notifiable data breaches, including-

(i)

the steps and measures that an organisation shall take in relation to the investigation and assessment of data breaches; and

(ii)

the form and manner in which the Authority and affected individuals shall be notified of notifiable data breaches;

{c)

the classes of persons who may act under this Order for minors, deceased persons or any other individuals who lack capacity to act under this Order and regulating the manner in which, and the extent to which, any rights or powers of individuals under this Order may be exercised on their behalf;

{d) the form, manner and procedures relating to applications and complaints under this Order;

{e}

to provide for matters relating to the operation by an operator of a dispute resolution scheme, including -

(i)

the standards or requirements of the services provided under the dispute resolution scheme;

(ii)

the fees that the operator may charge for the services provided under the dispute resolution scheme;

(iii)

the records that the operator shall keep, and the period of retention of those records;

(iv)

the reports that the operator shall submit to the Authority, and the manner and time for those submissions; and

(v)

generally to give effect to or for carrying out the purposes of section 34;

(fJ the conduct of reviews by the Authority under section 35;

{g} the form, manner and procedures for applications for reconsideration by the Authority under section 40;

64

65 8th. JANUARY, 2025

(h)

the form, manner and procedures for appeals to an Appeal

Committee, including the fees to be paid in respect of such appeals;

(i}

the award of costs of or incidental to any proceedings before the

Authority or Appeal Committee, and the award of expenses, including any allowance payable to persons in connection with their attendance before the Authority or Appeal Committee;

(j}

the fees to be paid in respect of applications, and services provided by or on behalf of the Authority, under this Order.