Senior vice president of legal, compliance and privacy; corporate secretary | Privy

Aregina Pernong
Senior vice president of legal, compliance and privacy; corporate secretary | Privy
Team Size: 11
What are the most significant cases, projects, and transactions you have worked on in the past year?
Over the past year, my team and I have delivered several milestone achievements that have strengthened Privy’s leadership in Indonesia’s digital identity and compliance landscape. One of our proudest accomplishments was integrating Privy into the Financial Services Authority (OJK) regulatory sandbox, making us the first electronic signature provider in Indonesia to reach this stage. This achievement allows Privy to collaborate directly with OJK and financial institutions to help shape the regulatory framework for digital trust. It represents a critical step toward expanding the adoption of secure digital identity solutions across Indonesia’s rapidly evolving digital economy. Another key initiative was the development of the Privy Data Privacy Handbook for both internal and external stakeholders. I initiated and led this project to provide a clear, practical compliance guide aligned with Indonesia’s new Personal Data Protection Law. The handbook has become a trusted reference tool for thousands of our clients and hundreds of employees, empowering them to integrate robust data privacy practices into their daily operations. A third highlight was leading Privy’s strategic acquisition of AyoPajak, one of Indonesia’s leading digital tax platforms. I oversaw all regulatory and legal aspects of the transaction, ensuring full compliance with acquisition requirements and seamless execution. Following the completion of the deal, my team and I have been driving the post-merger integration process, aligning operational, legal, and compliance frameworks between Privy and AyoPajak. This acquisition marks a major milestone in Privy’s expansion strategy, reinforcing our position as a leading provider of integrated digital identity and compliance solutions.
What strategies do you employ to ensure the successful digital transformation of a legal department while maintaining compliance with your country’s data protection laws?
My approach to digital transformation in the legal function balances innovation with regulatory compliance, ensuring that technology adoption strengthens both efficiency and trust. At the core of this strategy is a Privacy by Design philosophy—embedding data protection principles into every stage of product development, from concept to implementation. We also maintain robust governance frameworks, developing internal policies on encryption, consent, and security that are aligned with ISO 27001, ISO 27701, and Indonesia’s Ministry of Communication and Digital Affairs guidelines. These frameworks ensure that privacy and security are foundational to all our operations. Additionally, I prioritise public awareness and internal capability-building. We conduct regular training sessions and knowledge-sharing programmes to ensure that employees across all departments understand their data privacy obligations. This culture of continuous education not only supports compliance but also empowers teams to act as responsible stewards of digital information. Through this structured and proactive approach, we ensure that digital transformation enhances operational excellence without compromising on governance, integrity, or consumer trust.
What do you think are the most important attributes for a modern in-house counsel to possess?
In my view, modern in-house counsel must be more than legal advisors—they must be strategic business partners, innovation advocates, and trusted leaders. First, strategic thinking is essential. In-house counsel need to translate complex legal insights into actionable business strategies, ensuring that legal perspectives contribute to growth and decision-making. Second, regulatory agility is increasingly important in today’s fast-changing environment. Legal professionals must stay attuned to technological advances and legislative developments, adapting quickly to emerging risks and opportunities. Finally, leadership and communication are key. The ability to foster trust across teams, build awareness of legal and ethical responsibilities, and influence organisational culture is what differentiates effective in-house counsel from purely technical advisors.
What is a cause, business or otherwise, that you are passionate about? Why is this?
I am deeply passionate about digital inclusion and data privacy. At Privy, I dedicate my efforts to enabling secure, trusted access to digital identity solutions that empower both individuals and businesses. This work goes beyond compliance—it is about protecting consumer rights and strengthening public confidence in Indonesia’s digital ecosystem. As a woman, mother, and leader, this passion also carries a personal dimension. I want to help build a safer, more inclusive digital environment not only for today’s society but also for the next generation, including my own children. Balancing these roles has taught me the importance of resilience, empathy, and purpose—qualities that inspire me to lead with integrity and to contribute meaningfully to positive change in both business and society.