Looking Ahead To Indonesia's Personal Data Protection Agency

The introduction of Law No. 27 of 2022 regarding Personal Data Protection ("PDP Law") on October 17, 2022, marked a significant step toward strengthening data protection in Indonesia. Among other actions, the PDP Law calls for the creation of a new data protection body, the Personal Data Protection Agency ("PDP Agency"), which will be an independent body directly accountable to the president.

The PDP Agency will have substantial authority to enforce and implement personal data protection regulations. Its responsibilities will include developing policies and strategies, facilitating alternative dispute resolution processes, issuing directives, handling complaints, conducting investigations, summoning individuals or entities, and requesting information or documents related to alleged data protection violations.