Cyber Law at Brunei
Brunei has developed a robust legal and institutional framework to address cybercrime, data protection, and digital governance, aligning with international standards and enhancing public trust in its digital ecosystem.
Cybercrime Legislation
The Computer Misuse Act 2007 is the primary legislation addressing cybercrime in Brunei. It criminalizes unauthorized access to computer systems, data modification, and the use of computers to commit offenses. The Act includes provisions for law enforcement to access computer data during investigations. Additionally, the Electronic Transactions Act 2008 provides legal recognition for electronic records and signatures, facilitating secure digital transactions. For child online protection, Brunei enforces relevant sections of the Penal Code and the Undesirable Publications Act.
Data Protection Framework
In March 2025, Brunei introduced the Personal Data Protection Order (PDPO) 2025, which regulates the collection, use, and disclosure of personal data by private sector organizations and non-governmental organizations. The PDPO grants individuals rights over their personal data, including the ability to opt-in or opt-out and withdraw consent at any time. The Authority for Info-communications Technology Industry (AITI) is designated as the regulatory body responsible for enforcing data protection policies. The PDPO includes provisions for administrative and criminal penalties for violations, with fines ranging from BND 10,000 to BND 80,000, and potential imprisonment for serious offenses.
Cybersecurity Initiatives
Brunei established the Brunei Computer Emergency Response Team (BruCERT) in 2004 to enhance national cybersecurity. BruCERT collaborates with international organizations to prevent, analyze, and respond to cybersecurity incidents. The government has also implemented measures to combat cyber threats, including blocking fraudulent websites and phone numbers, and re-registering prepaid SIM cards to prevent misuse. Public awareness campaigns and collaboration with law enforcement agencies further strengthen the country's cybersecurity efforts.
Institutional Oversight
AITI plays a central role in regulating telecommunications and information technology in Brunei. It oversees compliance with data protection laws, manages digital infrastructure, and promotes cybersecurity initiatives. AITI also facilitates capacity-building programs, such as the Certified Information Privacy Manager (CIPM) competency program, to support organizations in adhering to data protection standards.
Through these comprehensive legal frameworks and institutional measures, Brunei aims to foster a secure and trustworthy digital environment, aligning with international best practices and enhancing its position in regional and global digital governance.
RELATED Blog
0 comments