Section 16
Personal data collected before commencement of Order
of Personal Data Protection Order, 2025
(1)
Notwithstanding the other provisions in this Part, an organisation may use personal data about an individual collected before the date of commencement of this Order for the purposes for which the personal data was collected unless -
23
fa} consent for such use is withdrawn in accordance with section 13; or
{b} the individual, whether before, on or after the date of commencement of this Order, has otherwise indicated to the organisation that he opts-out or otherwise does not consent to the use of the personal data.
(2)
No organisation shall use a Brunei Darussalam telephone number of the individual for the purpose of sending a direct marketing message unless the organisation has given the individual a reasonable opportunity to opt-out from receiving the direct marketing message.