Law note · Brunei Darussalam

Personal Data Protection Order 2025, data-subject rights

cite Personal Data Protection Order, 2025 (S 1/2025), ss.18-20 stage RECENT in force 8 months effective 2026-01-01 kind Data subject rights binds private bodies reviewed 2026-08-29

What it requires

Brunei's Personal Data Protection Order 2025 has granted an individual a right to access personal data an organisation holds about them, including a voiceprint or faceprint, and a right to have inaccurate personal data corrected, since these rights (Part 5) took effect 1 January 2026 under Government Gazette No. S 11/2025. The Order names no separate deletion or data-portability right.

When LexLint raises it

processes_biometrics
processes_voice
crawls_web

What we found

Part 5 of the Order grants an individual a right of access to personal data an organisation holds about them (section 18) and a right to have inaccurate personal data corrected (section 19), with section 20 allowing either right to be exercised on the individual's behalf, for example by a legal representative.

As with Singapore's PDPA, the Order names no distinct deletion or erasure right and no data-portability provision; access and correction, subject to exceptions listed in Schedules 4 and 5, are the only named statutory rights. These rights reach a voiceprint or faceprint exactly like any other personal data the Order covers, since it draws no sensitive-category or biometric-specific distinction.

Government Gazette No. S 11/2025, read directly, confirms the Minister appointed 1 January 2026 as the commencement date for Parts 3 to 9 (which includes Part 5) of the Order, so this Part's rights are in effect from that date.

Primary source

official gazette text
Attorney General's Chambers of Brunei Darussalam (agc.gov.bn), via an Internet Archive capture since the origin host's TLS certificate has expired

← Back to the example · Lint your app →