It is reported that the government of Brunei periodically blocks online content. Various laws are employed to restrict online content, including the Censorship of Films and Public Entertainments Act 1963, the Undesirable Publications Act 1982, the Penal Code 1952, and the Sedition Act 1983. Additionally, the Broadcasting Authority can mandate the removal or prohibition of content that violates the Code of Practice.

Pursuant to Section 3(b) of the Broadcasting (Class Licence) Notification 2001, issued under Section 12 of the Broadcasting Act (Cap. 180), computer online services provided by Internet Content Providers (ICPs) and Internet Service Providers (ISPs) are classified as licensable broadcasting services subject to a class licence regime.
An “Internet Content Provider” is defined to include: (i) any individual in Brunei Darussalam who provides programmes on the World Wide Web for business, political, or religious purposes; and (ii) any corporation or group of individuals, whether incorporated or otherwise, that provides programmes on the World Wide Web, including web publishers and web server administrators.
Under this framework, ISPs are required to register with the Minister and to pay annual licence fees. By contrast, ICP registration is only required for specified categories, including political parties and entities engaged in political or religious matters relating to Brunei, as well as in cases where the Minister mandates registration by written notice, such as for ICPs operating online newspapers.

Pursuant to Section 34 of the Telecommunications Order 2001, no person may offer for sale, sell, or possess for sale telecommunications equipment, or possess radiocommunications equipment, except in accordance with a licence granted under Section 5.
This requirement is operationalised by the Authority for Info-communications Technology Industry (AITI) through the Advisory Guidelines on Dealer Telecommunications Licence. Under Section 2.1.1 of the Guidelines, a Dealer Telecommunications Licence (DTL) authorises the licensee to import, lease, sell, offer for sale, or possess such equipment, while Section 2.2.1 restricts eligibility to businesses and companies established in Brunei Darussalam.
In addition, the commercial importation of telecommunications or radiocommunications equipment for resale is subject to further requirements, including Dealer Type Approval and a Dealer Import Permit. AITI issues the Dealer Import Permit only to holders of a valid Dealer Telecommunications Licence who have obtained the corresponding type approval for the equipment.

According to Art. 23 of the Broadcasting Act (Cap. 180), no person may import, offer for sale, sell, or possess for the purpose of sale any broadcasting equipment except under, and in accordance with, a valid licence.

It is reported that the Authority for Info-communications Technology Industry (AiTi), the executive authority for the supervision and administration of services in the telecommunications sector, is independent from the government in the decision-making process.

The Data Protection Policy (DPP) applies only to public agencies, including government Ministries and Departments, educational institutions and statutory bodies. Section 18 provides that the agencies can transfer personal data to a party outside of Brunei only if:
- There is a reasonable belief that the recipient is subject to a law, binding scheme or contract which upholds principles for fair data handling substantially similar to the DPP;
- The individual has provided consent;
- It is necessary for contract performance or pre-contractual obligations; and
- Reasonable steps have been taken to ensure the data will not be used, held or disclosed by the recipient in a manner inconsistent with the DPP.

Section 24 of the Personal Data Protection Order provides that an organisation may not transfer personal data to any country outside Brunei unless the transfer is carried out in accordance with prescribed requirements intended to ensure that the data receives a standard of protection comparable to that afforded under the Order. The Authority may, upon application by an organisation, issue a written notice granting an exemption from any such requirement, and may impose conditions on the exemption as it considers appropriate. Any exemption or condition may be added to, varied, or revoked by the Authority at any time.
Under Notification of Commencement No. S 11, Section 24 is scheduled to enter into force on 1 January 2026.

Brunei has joined an agreement with binding commitments to open data transfers across borders: the Comprehensive and Progressive Agreement for Trans-Pacific Partnership (CPTPP, Art. 14.11).

The Personal Data Protection Order establishes a comprehensive framework for the protection of personal data in Brunei. The Order designates the Authority for Info‑Communications Technology Industry of Brunei Darussalam (AITI) as the supervisory body responsible for the enforcement and administration of all data protection laws and regulations. Notifications of Commencement No. S 10 and No. S 11 specify the dates on which the different parts of the Order are scheduled to take effect, with the legislation set to come fully into force on 1 January 2026.

Pursuant to Art. 7(c) of the Personal Data Protection Order, 2025, organisations must designate one or more individuals to take responsibility for ensuring compliance with the Order. Although the Order was published in January 2025, it provides for phased commencement through Gazette notifications. Accordingly, Part 3, including Art. 7, entered into force on 1 January 2026, rather than on the publication date.

Brunei has ratified the World Intellectual Property Organization (WIPO) Copyright Treaty.

Brunei has ratified the World Intellectual Property Organization (WIPO) Performances and Phonograms Treaty.

Brunei does not have a comprehensive framework in place that provides effective protection of trade secrets, but trade secrets may be protected under contracts and by an action in breach of confidence as the country follows the common law model.

According to Art. 22 of the Telecommunications Order 2001, the Authority for Info-communications Technology Industry of Brunei Darussalam (AITI) may direct any telecommunications licensee to coordinate and cooperate with another person, in such manner and on such terms as the Authority may determine, in relation to the use or sharing of any telecommunications installation, plant, system, or part thereof.
In addition, acting under the powers conferred by Section 26(1) of the Telecommunications Order 2001, AITI has issued the Code of Practice for Competition in the Telecommunications Sector (Competition Code), which further establishes infrastructure-sharing obligations, including those set out in Section 7.

Pursuant to Section 3.4 of the Licensing and Regulatory Framework, foreign persons are prohibited from holding a majority shareholding or exercising control, whether directly or indirectly, in a company applying for a licence to provide telecommunications services. This restriction applies to both Infrastructure Provider for the Telecommunications Industry (INTI) licences and Service Provider for the Telecommunications Industry (SETI) licences.