There are currently no general data protection laws in Brunei but the country has been guided by a Data Protection Policy (DPP) since 2014, which applies to agencies (Any Government Ministry or Department including Educational Institutions and Statutory Body [2.1.3, DPP]).Under DPP, Agencies are only permitted to transfer personal data to a party outside of Brunei if: - There is a reasonable belief that the recipient is subject to a law, binding scheme or contract, which upholds principles for fair data handling substantially similar to the DPP;The individual has provided consent;It is necessary for contract performance or pre-contractual obligations; and- Reasonable steps have been taken to ensure the data will not be used, held or disclosed by the recipient inconsistent to the DPP.