Section 24
Transfer of personal data outside Brunei Darussalam
of Personal Data Protection Order, 2025
( 1) No organisation shall transfer any personal data to a country outside
Brunei Darussalam except in accordance with the prescribed requirements to ensure that organisations provide a standard of protection to personal data so transferred that is comparable to the protection under this Order.
(2)
The Authority may, on the application of any organisation, by notice in writing exempt the organisation from any prescribed requirement pursuant to subsection ( 1) in respect of any transfer of personal data by that organisation.
(3)
An exemption under subsection (2) -
(a} may be granted subject to such conditions as the Authority may specify in writing; and
(b} need not be published in the Gazette and may be revoked at any time by the Authority.
(4)
The Authority may at any time add to, vary or revoke any condition imposed under this section.
PART7
NOTIFICATION OF DATA BREACHES