Personal Data Protection Order, 2025 · As enacted · Part · Preliminary
24. Transfer of personal data outside Brunei Darussalam
Official textFrom Attorney General's Chambers, unchanged
( 1) No organisation shall transfer any personal data to a country outside
organisation
"organisation" includes any individual, company, association or body of persons, corporate or unincorporated, whether or not- (a} formed or recognised under the law of Brunei Darussalam; or (bJ resident, or having an office or a place of business, in Brunei Darussalam;
Brunei Darussalam except in accordance with the prescribed requirements to ensure that organisations provide a standard of protection to personal data so transferred that is comparable to the protection under this Order.
personal data
"personal data" means data, whether true or not, about an individual who can be identified - (a} from that data; or (bJ from that data and other information to which the organisation has or is likely to have access;
The Authority may, on the application of any organisation, by notice in writing exempt the organisation from any prescribed requirement pursuant to subsection ( 1) in respect of any transfer of personal data by that organisation.
Authority
"Authority" means the Authority for Info-communications Technology Industry of Brunei Darussalam established by section 3 of the Authority for Info-communications Technology Industry of Brunei Darussalam Order, 2001;
An exemption under subsection (2) -
(a} may be granted subject to such conditions as the Authority may specify in writing; and
(b} need not be published in the Gazette and may be revoked at any time by the Authority.
The Authority may at any time add to, vary or revoke any condition imposed under this section.
PART7
NOTIFICATION OF DATA BREACHES
Terms defined in s 2
Authority
Defined · s 2"Authority" means the Authority for Info-communications Technology Industry of Brunei Darussalam established by section 3 of the Authority for Info-communications Technology Industry of Brunei Darussalam Order, 2001;
organisation
Defined · s 2"organisation" includes any individual, company, association or body of persons, corporate or unincorporated, whether or not- (a} formed or recognised under the law of Brunei Darussalam; or (bJ resident, or having an office or a place of business, in Brunei Darussalam;
personal data
Defined · s 2"personal data" means data, whether true or not, about an individual who can be identified - (a} from that data; or (bJ from that data and other information to which the organisation has or is likely to have access;
Part
Appeals
Part
Investigation and Offences
Part