Personal Data Protection Order, 2025 · As enacted · Part · Preliminary
17. Notification of purpose
Official textFrom Attorney General's Chambers, unchanged
An organisation may collect, use or disclose personal data about an individual only for purposes that the individual has been informed of under subsection (2), if applicable.
organisation
"organisation" includes any individual, company, association or body of persons, corporate or unincorporated, whether or not- (a} formed or recognised under the law of Brunei Darussalam; or (bJ resident, or having an office or a place of business, in Brunei Darussalam;
For the purposes of section 10(1){a} and subsection (1), an organisation shall inform the individual of -
fa} the purposes for the collection, use or disclosure of the personal data on or before collecting the personal data;
personal data
"personal data" means data, whether true or not, about an individual who can be identified - (a} from that data; or (bJ from that data and other information to which the organisation has or is likely to have access;
{b} any other purpose of the use or disclosure of the personal data of which the individual has not been informed under paragraph {a}, before the use or disclosure of the personal data for that purpose; and
{c} on request by the individual, the business contact information of a person who is able to answer on behalf of the organisation the individual's questions about the collection, use or disclosure of the personal data.
business contact information
"business contact information" means an individual's name, position name or title, business telephone number, business address, business electronic mail address or business fax number and any other similar information about the individual, not provided by the individual solely for his personal purposes;
An organisation, on or before collecting personal data about an individual from another organisation without the consent of the individual, shall provide the other organisation with sufficient information regarding the purpose of the collection to allow that other organisation to determine whether the disclosure would be in accordance with this Order.
Subsection (2) does not apply if-fa} the individual is deemed to have consented to the collection, use or disclosure under section 11 or 12; or
{b} the organisation collects, uses or discloses the personal data without the consent of the individual in accordance with section 14.
Notwithstanding subsection (4), an organisation shall comply with subsection (6) on or before collecting, using or disclosing personal data about an individual for the purpose of or in relation to the organisation -
fa} entering into an employment relationship with the individual or appointing the individual to any office; or
employment
"employment" includes working under an unpaid volunteer work relationship; 11 8th. JANUARY, 2025
(b} managing or terminating the employment relationship with or appointment of the individual.
For the purposes of subsection (5), the organisation shall inform the individual of the following -
fa} the purpose for which the organisation IS collecting, using or disclosing the personal data about the individual;
(b} on request by the individual, the business contact information of a person who is able to answer the individual's questions about that collection, use or disclosure on behalf of the organisation.
RIGHTS OF INDIVIDUALS
Terms defined in this Act
business contact information
Defined · s 2"business contact information" means an individual's name, position name or title, business telephone number, business address, business electronic mail address or business fax number and any other similar information about the individual, not provided by the individual solely for his personal purposes;
disclose
Defined · s 30"disclose", in relation to personal data, includes providing access to personal data;
employment
Defined · s 2"employment" includes working under an unpaid volunteer work relationship; 11 8th. JANUARY, 2025
organisation
Defined · s 2"organisation" includes any individual, company, association or body of persons, corporate or unincorporated, whether or not- (a} formed or recognised under the law of Brunei Darussalam; or (bJ resident, or having an office or a place of business, in Brunei Darussalam;
personal data
Defined · s 2"personal data" means data, whether true or not, about an individual who can be identified - (a} from that data; or (bJ from that data and other information to which the organisation has or is likely to have access;
Part
Appeals
Part
Investigation and Offences
Part