Compliance Node Overview
Brunei Darussalam Personal Data Protection Order 2025 (PDPO, Gazette S 1 of 2025, approved by the Sultan on 8 January 2025) establishes a consent-based framework of data subject rights, mandatory data user registration, lawful basis requirements, and cross-border transfer controls. The Authority for Info-communications Technology Industry of Brunei Darussalam (AITI) is the designated supervisory authority. The 2021 reference was an AITI public consultation paper, not an enacted law.
Pillar: Cybersecurity · Authority: Authority for Info-communications Technology Industry of Brunei Darussalam (AITI) · Version: 1.1.0 · Last updated:
Primary source: https://www.agc.gov.bn/AGC%20Images/LAWS/Gazette_PDF/2025/EN/S%201_2025%20%5BE%5D.pdf
SHA-256 integrity: 866e5a44b5ef4a6c2b75fbac5f57e45bc0106f695481b55ca86ca808d7b9e334
Primary Citations — 5 traced to source
- Brunei Darussalam Personal Data Protection Order 2025 (PDPO, Gazette S 1 of 2025) - the foundational data protection legislation establishing data user obligations, data subject rights, and mandatory registration requirements.
- Authority for Info-communications Technology Industry of Brunei Darussalam (AITI) - the designated supervisory authority for data user registration, oversight, and enforcement of the Personal Data Protection Order.
+ 3 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
⚠ Important: Human Verification Required
Bidda compliance nodes are reference intelligence, not legal advice. Every node must be reviewed by a qualified compliance professional or legal counsel before implementation in any enterprise workflow, regulated system, or compliance programme. See bidda.com/disclaimer for full terms.