Brunei PDPO
Personal Data Protection Order 2025
Brunei's personal data protection order requiring DPIA and imposing penalties up to 10% Brunei turnover or $1M.
Jurisdiction
Brunei
Enacted
Dec 1, 2025
Effective
Jan 1, 2026
Enforcement
Brunei Personal Data Protection Authority
Why It Matters
Brunei's significant penalties (10% turnover or $1M) create high-stakes compliance environment for AI chatbot platforms serving Brunei users.
Recent Developments
Enacted December 2025, effective January 2026
At a Glance
Applies to
Who Must Comply
- Data controllers and processors in Brunei
- Entities processing data of Brunei residents
Safety Provisions
- Data Protection Impact Assessment required
- Consent requirements for data processing
- Breach notification to authority
- Cross-border transfer restrictions
- Security safeguards
Compliance & Enforcement
Key Dates
Jan 1, 2026
All provisions take effect
Penalties
BND 1M or 10% revenue (whichever higher)
Primary Source
DataGuidance Brunei Overview
https://www.dataguidance.com/
View on map
Brunei
Focus Areas
Cite This
APA
Brunei. (2025). Personal Data Protection Order 2025.
Related Regulations
India DPDP Act
STRICTEST children's provisions in APAC. Children = under 18; verifiable parental consent MANDATORY; PROHIBITION on tracking, behavioral monitoring, targeted advertising to children.
Indonesia PP 17/2025
Indonesia's comprehensive child online protection regulation establishing age-appropriate design requirements for electronic systems accessible to children. Most granular age classification globally (5 groups). Requires risk assessments, privacy-by-default, parental consent, DPIAs, and prohibits data profiling of children. First of its kind in Asia and Global South.
Indonesia UU PDP
Indonesia's comprehensive data protection law. Health and children's data = "specific personal data" with enhanced protections. Criminal penalties up to 6 years imprisonment.
China CSL Amendments
First major revision of China's foundational Cybersecurity Law since 2017. Introduces formal AI governance provisions, significantly increases penalties, and expands extraterritorial application to all cybersecurity violations.
Nepal AI Policy
Nepal national AI policy establishing governance framework and development priorities. Creates AI Governance Council (chaired by Minister for Communications and IT), AI Regulation Council, National AI Centre, and AI Regulatory Authority. Six pillars including ethics, human resource development, and sectoral application.
Pakistan AI Policy
Pakistan's national AI roadmap establishing six strategic pillars: AI Innovation Ecosystem, Awareness and Readiness, Research and Development, Infrastructure, Governance, and International Cooperation. Creates National AI Fund (NAIF), Centres of Excellence in 7 cities, and targets training 200,000 individuals annually.
Last updated January 22, 2026. Verify against primary sources before relying on this information.