Indonesia Data Protection Laws And Regulations – Processing Personal Data

The principal law governing data protection in Indonesia is Law No. 11 of 2008 regarding Electronic Information and Transactions, as amended by Law No. 19 of 2016 ("Electronic Information Law"). In addition to the Electronic Information Law, rules governing personal data protection are also found in Government Regulation No. 71 of 2019 regarding the Implementation of Electronic Systems and Transactions ("GR 71") and Minister of Communication and Informatics Regulation No. 20 of 2016 regarding the Protection of Personal Data ("MOCI Reg. 20"). The Electronic Information Law, GR 71, and MOCI Reg. 20 are collectively referred to as the "PDP Regulations".

The key principles that apply to the processing of personal data are as follows: