Personal Data Protection Order 2025, cross-border transfer

Personal Data Protection Order, 2025 (S 1/2025), s.24

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force 9 months, effective 1 January 2026.

A cross border transfer rule binding private bodies.

As of 29 August 2026.

What it requires

Brunei's Personal Data Protection Order 2025 has required, since this duty (Part 6) took effect 1 January 2026 under Government Gazette No. S 11/2025, an organisation to meet a comparable-protection standard, set by regulations not yet located, before transferring personal data, including a voiceprint or other biometric identifier, outside Brunei Darussalam, unless the Authority has granted an exemption.

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Section 24 bars an organisation from transferring personal data outside Brunei Darussalam except in accordance with prescribed requirements ensuring the receiving country provides protection comparable to the Order's own standard, with the Authority empowered to grant an organisation a case-by-case exemption from any prescribed requirement.

This is a comparable-protection standard structurally identical to Singapore PDPA section 26, not a flat prohibition or a data-localization mandate; the specific prescribed requirements sit in subsidiary regulations not read. This duty reaches any personal data leaving Brunei, including a voiceprint, faceprint, or other biometric identifier processed by a service, since the Order draws no sensitive-category distinction.

Government Gazette No. S 11/2025 confirms the Minister appointed 1 January 2026 as the commencement date for Parts 3 to 9 (which includes Part 6, where section 24 sits) of the Order, so this duty is in effect from that date.

When LexLint raises it

crawls_web
trains_models
processes_biometrics
processes_voice

Read the law

official gazette text, Attorney General's Chambers of Brunei Darussalam (agc.gov.bn), Internet Archive capture

archived copy

Read from a public archive copy, not the publisher directly. The publisher does not serve this page to automated readers, so a direct fetch was not an option here; how we access sources. Archived January 9, 2026. Publisher's page: https://www.agc.gov.bn/AGC%20Images/LAWS/Gazette_PDF/2025/EN/S%201_2025%20%5BE%5D.pdf

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app