🇮🇩
Indonesia
Personal Data Protection Law (PDP Law)
Asia🟡 Moderate
Compliance Score
57%
8 Addressed
5 Partial
1 None
Authority
President of Indonesia
Overview
Indonesia's PDP Law, enacted in 2022, establishes a comprehensive but evolving framework. The law introduces important concepts like data subject rights and obligations for data controllers, though the independent authority is not yet fully operational.
14-Topic Coverage Analysis
Data Protection Authority
PartialConsent Requirements
AddressedData Subject Rights
AddressedCross-Border Transfer
AddressedBreach Notification
AddressedDPO Requirements
PartialChildren's Data
AddressedPenalties & Enforcement
AddressedSector-Specific Rules
PartialCookie/Tracking
PartialAI & Automated Decisions
NoneData Localisation
AddressedSignificant Data Fiduciary
PartialGovernment Data
Addressed? Frequently Asked Questions
What is the primary data protection law in Indonesia?+
Indonesia is governed by the Personal Data Protection Law (PDP Law). The law is enforced by the President of Indonesia. According to our analysis, the country has a Moderate level of data protection framework.
Does Indonesia require a Data Protection Officer (DPO)?+
Partially. The Personal Data Protection Law (PDP Law) may require a DPO only for specific high-risk organizations or sectors. It is not universally mandatory for all businesses.
What are the data localisation rules in Indonesia?+
Yes, Indonesia has strict data localisation requirements. The Personal Data Protection Law (PDP Law) may require certain types of personal data to be stored within the country's borders.
What are the breach notification requirements in Indonesia?+
Under the Personal Data Protection Law (PDP Law), organizations must notify the President of Indonesia and affected individuals without undue delay in the event of a personal data breach.