Sign In

PERSONAL DATA PROTECTION

ASEAN Data Management Framework and Model Contractual Clauses on Cross-Border Data Flows

Issue date: 14 April 2022

On 22 January 2021, the 1st Association of Southeast Asian Nations (ASEAN) Digital Ministers' Meeting (ADGMIN) approved the ASEAN Data Management Framework (DMF) and Model Contractual Clauses for Cross Border Data Flows (MCCs). The DMF and MCCs were developed by the Working Group on Digital Data Governance. 

The DMF and MCC's are voluntary standards that may be used as guidance relating to data management for businesses to use when conducting business across ASEAN.

The DMF provides guidance to manage data through establishment of data governance structures and safeguards. To download a copy of the DMF, please click here.

The MCCs are templates for contractual terms and conditions which may be included in legal agreements between businesses to ensure personal data is protected when engaging in cross border data transfers. The use of the MCC's reduces negotiation and compliance cost and time. To download a copy of the MCCs, please click here.

For any enquiries, please email pdp@aiti.gov.bn or call 232 3232 during office hours.


AITI's Response to Feedback on the Public Consultation Paper on Personal Data Protection for the Private Sector in Brunei Darussalam (RPCP)

Issue Date: 03 December 2021

AITI has reviewed the submissions received in relation to the Public Consultation on Personal Data Protection for the Private Sector in Brunei Darussalam published on 20 May 2021 and has published its response on 3 December 2021. To access AITI's response, please click on the link below: 

AITI's Response to Feedback on the Public Consultation Paper on Personal Data Protection for the Private Sector in Brunei Darussalam (RPCP)

At the close of the Public Consultation on Personal Data Protection for the Private Sector in Brunei Darussalam, AITI received the following submissions from the industry and interested parties.


  1. Amazon Web Services
  2. Brunei Insurance and Takaful Association
  3. Brunei Association of Banks
    1. Baiduri Bank Berhad
    2. Bank Islam Brunei Darussalam
    3. Bank of China (Hong Kong) Limited
    4. Maybank (Malayan Banking Berhad)
    5. Standard Chartered Brunei
    6. United Overseas Bank Limited (UOB)
    7. Perbadanan Tabung Amanah Islam Brunei
  4. Brunei Shell Petroleum Co. Sdn. Bhd.
  5. Datastream Digital Sdn. Bhd.
  1. Great Eastern Life Assurance Co. Ltd.
  2. IBM World Trade Corporation (Brunei Branch)
  3. Imagine Sdn. Bhd.
  4. LBC Mabuhay Remittance Sdn. Bhd.
  5. Progresif Sdn. Bhd.
  6. Royal Brunei Airlines Sdn. Bhd.
  7. Unified National Networks Sdn. Bhd.
  8. US-ASEAN Business Council


Public Consultation: Slides

Issue Date: 27 May 2021

To download a copy of the slides presented at the public consultation sessions, please click here.

Please note that the contents of the slides are for general information only and are not intended to be a full analysis of the subject(s) covered. They do not constitute legal advice and should not be regarded as a substitute for such advice or relied upon for application in specific situations.


Public Consultation Paper

Issue Date: 20 May 2021

AITI has released a Public Consultation Paper (PCP) on Thursday, 20 May 2021 to obtain feedback from Government agencies, private sector organisations and the general public on the proposed data protection framework for private sector in Brunei Darussalam. The framework aims to improve trust between individuals and organisations by recognising both the rights of individuals to protect their personal data and the need of private sector organisations to collect, use and disclose such personal data. To access the Public Consultation Paper, please click here.


Opening Period: Thursday, 20 May 2021 to Wednesday, 23 June 2021 no later than 5:00pm.

Enquiries: pdp@aiti.gov.bn 

Responses can be submitted by: 

  1. E-mail to pdp@aiti.gov.bn with the subject "Public Consultation Paper on the Personal Data Protection for the Private Sector in Brunei Darussalam"; or

  2. Hand / courier to: 
    The Chief Executive
    Authority for Info-communications Technology Industry for Brunei Darussalam
    Block B14, Simpang 32-5,
    Kampung Anggerek Desa, Jalan Berakas BB3713
    Brunei Darussalam

    SUBJECT:            Public Consultation Paper on Personal Data Protection for the Private Sector in Brunei Darussalam


These sessions are open to:
Government agencies
Private sector organisations
Interested individuals 

For any enquiries, please email pdp@aiti.gov.bn or call 232 3232 during office hours.