Data Protection Overview

1. GoverningTexts

The concern of data protection exists wherever personal data is collected or stored. As a general guidance, Indonesia provides for the protection of the data of its citizens in the Constitution of the Republic of Indonesia 1945 (Constitution). In particular, Article 28G (1) of the Constitution states that 'each person shall have the right to the protection of their personal selves, families, respect, dignity, and possessions under their control.'

On October 17, 2022, Indonesia enacted a specific law regulating personal data protection, i.e., Law No. 27 of 2022 regarding Personal Data Protection (only available in Indonesian here) (PDPL). Unlike the previous regulatory regime that focused on personal data processed through an electronic system, the PDPL applies to personal data processed by both electronic and non-electronic means. The Government of Indonesia (Government) is in the process of enacting implementing regulations to the PDPL, which