Detailed overview
Brunei Darussalam does not currently have a comprehensive AI Act. Its AI governance framework is developing through official AI governance guidance, a forthcoming National AI Strategy, personal-data protection and sectoral law.
Official Ministry of Transport and Infocommunications materials state that Brunei published a Guide on AI Governance and Ethics in April 2025. The same official remarks describe the guide as supporting ethical development and deployment of AI and as part of a shared vision governed by guiding principles.
Brunei is also developing a National AI Strategy. Official materials state that the strategy is being developed by the Ministry of Transport and Infocommunications and will serve as a national roadmap for AI, supported by broader science, technology and innovation planning.
Personal-data protection is especially relevant to AI in Brunei. The Personal Data Protection Order 2025 is expected to fully come into force on 1 January 2026 and is described by official materials as a key legal guardrail for accountability in processing and handling personal data in the private sector. This matters for AI systems because generative AI, chatbots, analytics tools and automated decision systems may process personal or confidential information.
Brunei does not currently have one AI-specific penalty table equivalent to the EU AI Act. Penalties depend on personal-data protection, cybersecurity, telecoms, consumer, financial, healthcare, employment, public-sector or criminal-law rules, depending on the AI use case.
Practical requirements & details
Sourced from the Guide on AI Governance and Ethics (April 2025) and the Personal Data Protection Order 2025 administered with the Ministry of Transport and Infocommunications.
Guide on AI Governance and Ethics
- Published April 2025.
- Supports ethical development and deployment of AI under guiding principles.
National AI Strategy (in development)
- National roadmap for AI, supported by broader science, technology and innovation planning.
Personal Data Protection Order 2025
- Expected to fully come into force on 1 January 2026.
- Key legal guardrail for accountability in processing and handling personal data in the private sector.
- Relevant to generative AI, chatbots, analytics tools and automated decision systems processing personal or confidential information.
Penalties
- No AI-specific penalty table.
- Penalties depend on personal-data protection, cybersecurity, telecoms, consumer, financial, healthcare, employment, public-sector or criminal-law rules.