Answer to Oral Question PL027

QUESTION

Yang Berhormat Dr. Awang Haji Mahali bin Haji Momin

YANG BERHORMAT DR. AWANG HAJI MAHALI BIN HAJI MOMIN asked the MENTERI PENGANGKUTAN DAN INFOKOMUNIKASI to state the extent of the Ministry’s readiness to develop the country’s digital trust infrastructure, particularly in ensuring the security of collected data, artificial intelligence (AI) governance and algorithmic accountability.

ANSWER

Yang Berhormat Menteri Pengangkutan dan Infokomunikasi

Development of core infrastructure (flagship projects)

For the information of Yang Berhormat, the Government has continued to undertake various efforts to ensure the development of trusted digital infrastructure. Through the Digital Economy Masterplan 2025, emphasis has been placed on developing core infrastructure that will strengthen and create space for new opportunities through the implementation of three (3) major projects ('key flagship projects'), as previously shared.

One of the projects recently launched on 3 January 2026 is BruneiID, which is the Government’s single digital identity based on the principles of security, privacy and user control, and operates within a secure Government network environment and infrastructure.

Security and privacy are priorities in the development of BruneiID. Biometric authentication, such as fingerprint or facial recognition, is carried out on the user’s own device ('on-device authentication') and is neither stored nor processed centrally. Biometric data is not collected as a Government database. Personal data is protected in accordance with existing security and data protection standards. BruneiID also does not track users’ movements or activities. Its function is limited to digital identity verification and is activated only when users themselves choose to access certain Government services.

Strengthening Government infrastructure

From the perspective of strengthening Government infrastructure, various ongoing efforts are also being undertaken, including strengthening the Government network through the implementation of 'One Government Network', as well as the use of secure government data centres and 'cloud' infrastructure ('One Government Private Cloud'), which enables data storage and processing to be carried out with higher levels of security, availability and resilience. This includes the implementation of security controls such as 'data encryption', identity and access management, continuous network monitoring, as well as backup and disaster recovery mechanisms to ensure the continuity of the Government’s digital services.

In addition, the Ministry also emphasises the use of official communication and collaboration platforms through government email and the government intranet portal, which have been provided to ensure the protection of government information exchanges from the risks of leakage, manipulation or unauthorised access. These efforts are supported through centralised cybersecurity monitoring, vulnerability management, as well as the implementation of more coordinated incident prevention and response measures across all agencies.

Government Data Governance

From a governance perspective, the Government continues to strengthen the policy and standards framework relating to data management, namely the protection of government personal data ('Data Protection Policy'), to ensure that Government data is handled according to the principles of security, integrity, validity and lawful use. This includes establishing controls for data sharing between agencies, classifying government data and incorporating the 'privacy-by-design' principle into the development of digital systems.

Through the 'Data Sharing Guideline' developed by the National E-Government Centre (EGNC), these guidelines serve as the primary reference for Government agencies in carrying out data sharing securely, systematically and effectively, thereby supporting the development of the existing 'National Information Hub' (NIH) infrastructure.

At the same time, EGNC also gives attention to enhancing cybersecurity awareness, data handling training and compliance with information security best practices through continuous provision to the staff of this Department and other government agencies.

Through this comprehensive approach, EGNC strives to ensure that collected data is continuously protected, trusted and utilised responsibly to support policymaking and the delivery of public services.

Artificial Intelligence (AI) Governance and Algorithmic Accountability

The rapid growth of AI technology requires the establishment of an organised regulatory framework to ensure that issues relating to its ethical use are addressed. To this end, MTIC, through the Authority for Info-communications Technology Industry of Brunei Darussalam (AITI), established the Working Group on AI Governance and Ethics in May 2024.

This Working Group is led by AITI, with membership comprising representatives from 24 various Government and non-Government agencies, the private sector and institutions of higher learning.

Through this Working Group, a document entitled the Guide on Artificial Intelligence Governance and Ethics for Brunei Darussalam was produced in April 2025.

For the information of Yang Berhormat, during the annual Artificial Intelligence symposium in August 2025, the Working Group reconvened with the aim of producing the Guide on Artificial Intelligence Governance and Ethics for Brunei Darussalam, Version 2.0 or the 'Draft Guide on Artificial Intelligence Governance and Ethics for Brunei Darussalam, Version 2.0', which is targeted for publication in the second quarter of 2026.