In forceAs enactedCurrent version · As enactedSee versions on Attorney General's Chambers(opens the publisher’s site)
Personal Data Protection Order, 2025 · As enacted · Part · Preliminary
Personal Data Protection Order, 2025 · As enacted · Part · Preliminary
Official textFrom Attorney General's Chambers, unchanged
An organisation may collect, use or disclose personal data about an individual -
organisation
"organisation" includes any individual, company, association or body of persons, corporate or unincorporated, whether or not- (a} formed or recognised under the law of Brunei Darussalam; or (bJ resident, or having an office or a place of business, in Brunei Darussalam;
{a} only for purposes that a reasonable person would consider appropriate in the circumstances; and
(b} that are relevant and limited to what are reasonably necessary for its purposes.
disclose
"disclose", in relation to personal data, includes providing access to personal data;
organisation
"organisation" includes any individual, company, association or body of persons, corporate or unincorporated, whether or not- (a} formed or recognised under the law of Brunei Darussalam; or (bJ resident, or having an office or a place of business, in Brunei Darussalam;
personal data
"personal data" means data, whether true or not, about an individual who can be identified - (a} from that data; or (bJ from that data and other information to which the organisation has or is likely to have access;
Part
Part
Part