There are currently no general data protection laws in Brunei but the country has been guided by a Data Protection Policy (DPP) since 2014, which applies to agencies (Any Government Ministry or Department including Educational Institutions and Statutory Body [2.1.3, DPP]). This policy sets out the minimum requirements for the protection of Data, whether in electronic or manual form, by all Government Ministries, Departments, Educational Institutions, and Statutory Boards. This policy is subject to any existing applicable legislation.Under DPP, Agencies are only permitted to transfer personal data to a party outside of Brunei if: - There is a reasonable belief that the recipient is subject to a law, binding scheme or contract, which upholds principles for fair data handling substantially similar to the DPP;The individual has provided consent;It is necessary for contract performance or pre-contractual obligations; and- Reasonable steps have been taken to ensure the data will not be used, held or disclosed by the recipient inconsistent to the DPP.