Personal Data Protection Order, 2025 · As enacted · Part · Preliminary
8. Consent required
Official textFrom Attorney General's Chambers, unchanged
No organisation shall collect, use or disclose personal data about an individual unless -
organisation
"organisation" includes any individual, company, association or body of persons, corporate or unincorporated, whether or not- (a} formed or recognised under the law of Brunei Darussalam; or (bJ resident, or having an office or a place of business, in Brunei Darussalam;
17
{a} the individual gives, or is deemed to have given, his consent under this Order to the collection, use or disclosure; or
(b} the collection, use or disclosure without the consent of the individual is required or authorised under this Order or any other written law.
Terms defined in this Act
disclose
Defined · s 30"disclose", in relation to personal data, includes providing access to personal data;
organisation
Defined · s 2"organisation" includes any individual, company, association or body of persons, corporate or unincorporated, whether or not- (a} formed or recognised under the law of Brunei Darussalam; or (bJ resident, or having an office or a place of business, in Brunei Darussalam;
personal data
Defined · s 2"personal data" means data, whether true or not, about an individual who can be identified - (a} from that data; or (bJ from that data and other information to which the organisation has or is likely to have access;
Part
Appeals
Part
Investigation and Offences
Part