Personal Data Protection Order, 2025 · As enacted · Part · Preliminary
14. Collection, use and disclosure without consent
Official textFrom Attorney General's Chambers, unchanged
An organisation may-
organisation
"organisation" includes any individual, company, association or body of persons, corporate or unincorporated, whether or not- (a} formed or recognised under the law of Brunei Darussalam; or (bJ resident, or having an office or a place of business, in Brunei Darussalam;
{a} collect personal data about an individual, without the consent of the individual or from a source other than the individual, in the 22
personal data
"personal data" means data, whether true or not, about an individual who can be identified - (a} from that data; or (bJ from that data and other information to which the organisation has or is likely to have access;
circumstances or for the purposes, and subject to any condition, in
Schedule 1 or Part 1 of Schedule 2;
{b} use personal data about an individual without the consent of the individual, in the circumstances or for the purposes, and subject to any condition, in Schedule 1 or Part 2 of Schedule 2; or
{c} disclose personal data about an individual without the consent of the individual, in the circumstances or for the purposes, and subject to any condition, in Schedule 1 or Part 3 of Schedule 2.
disclose
"disclose", in relation to personal data, includes providing access to personal data;
Unless otherwise provided under this Order, an organisation may-
{a} collect personal data about an individual that is disclosed to the organisation in accordance with subsection (1){c} for purposes consistent with the purpose of that disclosure; or
{b} use or disclose personal data about an individual that is collected by the organisation in accordance with subsection (1){a} for purposes consistent with the purpose of that collection.
Terms defined in this Act
disclose
Defined · s 30"disclose", in relation to personal data, includes providing access to personal data;
organisation
Defined · s 2"organisation" includes any individual, company, association or body of persons, corporate or unincorporated, whether or not- (a} formed or recognised under the law of Brunei Darussalam; or (bJ resident, or having an office or a place of business, in Brunei Darussalam;
personal data
Defined · s 2"personal data" means data, whether true or not, about an individual who can be identified - (a} from that data; or (bJ from that data and other information to which the organisation has or is likely to have access;
Part
Appeals
Part
Investigation and Offences
Part