Personal Data Protection Order, 2025 · As enacted · Part · Investigation and Offences
48. Offences and penalties
Official textFrom Attorney General's Chambers, unchanged
Any person who-
{a} makes a request under section 18(1) to obtain access to personal data about another individual; or
personal data
"personal data" means data, whether true or not, about an individual who can be identified - (a} from that data; or (bJ from that data and other information to which the organisation has or is likely to have access;
(b} makes a request under section 19(1) to change personal data about another individual, without the authority of the individual, is guilty of an offence and liable on conviction to a fine not exceeding $5,000, imprisonment for a term not exceeding 12 months or both.
An organisation or person who-
organisation
"organisation" includes any individual, company, association or body of persons, corporate or unincorporated, whether or not- (a} formed or recognised under the law of Brunei Darussalam; or (bJ resident, or having an office or a place of business, in Brunei Darussalam;
(a} with an intent to evade a request under section 18 or 19, disposes of, alters, falsifies, conceals or destroys, or directs another person to dispose of, alter, falsify, conceal or destroy, a record containing -
personal data; or
information about the collection, use or disclosure of personal data;
obstructs or hinders the Authority or an authorised officer in the performance of any function or duty, or the exercise of any power, under this Order;
without reasonable excuse, neglects or refuses to provide any information or produce any document which the organisation or person is required by or under this Order to provide or produce to the Authority or an authorised officer;
neglects or refuses to attend before the Authority or an authorised officer as required by or under this Order; or
(e} makes a statement, or furnishes any information or document, to the Authority or an authorised officer under this Order, which the organisation or person knows, or ought reasonably to know, to be false or misleading in any material particular, is guilty of an offence and liable on conviction -
General penalty
in the case of an individual, to a fine not exceeding $10,000, imprisonment for a term not exceeding 12 months or both; and
in any other case, to a fine not exceeding $100,000.
Terms defined in s 2
authorised officer
Defined · s 2"authorised officer" means any person appointed as an authorised officer under section 4(2);
Authority
Defined · s 2"Authority" means the Authority for Info-communications Technology Industry of Brunei Darussalam established by section 3 of the Authority for Info-communications Technology Industry of Brunei Darussalam Order, 2001;
organisation
Defined · s 2"organisation" includes any individual, company, association or body of persons, corporate or unincorporated, whether or not- (a} formed or recognised under the law of Brunei Darussalam; or (bJ resident, or having an office or a place of business, in Brunei Darussalam;
personal data
Defined · s 2"personal data" means data, whether true or not, about an individual who can be identified - (a} from that data; or (bJ from that data and other information to which the organisation has or is likely to have access;
Part