Personal Data Protection Order, 2025 · As enacted · Part · Preliminary
19. Correction of personal data
Official textFrom Attorney General's Chambers, unchanged
An individual may request an organisation to correct an error or omission in the personal data about the individual that is in the possession or under the control of the organisation.
Unless the organisation is satisfied on reasonable grounds that a correction should not be made, the organisation shall -
organisation
"organisation" includes any individual, company, association or body of persons, corporate or unincorporated, whether or not- (a} formed or recognised under the law of Brunei Darussalam; or (bJ resident, or having an office or a place of business, in Brunei Darussalam;
(a} correct the personal data as soon as practicable; and
personal data
"personal data" means data, whether true or not, about an individual who can be identified - (a} from that data; or (bJ from that data and other information to which the organisation has or is likely to have access;
{b) subject to subsection (3), send the corrected personal data to every other organisation to which the personal data was disclosed by the organisation within a year before the date the correction was made, unless that other organisation does not need the corrected personal data for any legal or business purpose.
business
"business" includes the activity of any organisation, whether or not carried on for purposes of gain, or conducted on a regular, repetitive or continuous basis, but does not include an individual acting in his personal or domestic capacity;
An organisation (not being a credit bureau) may, if the individual consents, send the corrected personal data only to specific organisations to which the personal data was disclosed by the organisation within a year before the date the correction was made.
credit bureau
"credit bureau" means an organisation which- (a} provides credit reports for gain or profit; or (b) provides credit reports on a routine, non-profit basis as an ancillary part of a business carried on for gain or profit;
When an organisation is notified under subsection (2)(b} or (3) of a correction of personal data, the organisation shall correct the personal data in its possession or under its control unless the organisation is satisfied on reasonable grounds that the correction should not be made.
If no correction is made under subsection (2){a} or (4), the organisation shall annotate the personal data in its possession or under its control with the correction that was requested but not made.
Nothing in this section shall require an organisation to correct or otherwise alter an opinion, including a professional or an expert opinion.
An organisation is not required to comply with this section in respect of the matters specified in Schedule 4.
Terms defined in s 2
business
Defined · s 2"business" includes the activity of any organisation, whether or not carried on for purposes of gain, or conducted on a regular, repetitive or continuous basis, but does not include an individual acting in his personal or domestic capacity;
credit bureau
Defined · s 2"credit bureau" means an organisation which- (a} provides credit reports for gain or profit; or (b) provides credit reports on a routine, non-profit basis as an ancillary part of a business carried on for gain or profit;
organisation
Defined · s 2"organisation" includes any individual, company, association or body of persons, corporate or unincorporated, whether or not- (a} formed or recognised under the law of Brunei Darussalam; or (bJ resident, or having an office or a place of business, in Brunei Darussalam;
personal data
Defined · s 2"personal data" means data, whether true or not, about an individual who can be identified - (a} from that data; or (bJ from that data and other information to which the organisation has or is likely to have access;
Part
Appeals
Part
Investigation and Offences
Part