Last review date: 30 December 2025
- Law No. 11 of 2008 as lastly amended by Law No. 1 of 2024 on Electronic Information and Transactions (EIT Law)
- Law No. 27 of 2022 on Personal Data Protection (PDP Law)
- Government Regulation No. 71 of 2019 on the Implementation of Electronic Systems and Transactions (GR 71)
- Minister of Communication and Informatics (now known as Minister of Communication and Digital - MOCD) Regulation No. 20 of 2016 on Personal Data Protection in Electronic Systems (MOCD Regulation 20)
(Together, Data Protection Regulations)
Please note that all regulations are in the Indonesian language.
Last review date: 30 December 2025
Indonesia does not currently have a specific cybersecurity law. Provisions on cybersecurity are mainly covered in the EIT Law and GR 71. There are also some further implementing regulations issued by the National Cyber and Code Agency (Badan Siber dan Sandi Negara - BSSN).
The Indonesian government is currently preparing a law on cybersecurity and resilience. There is no clear timeline yet for when this law will be enacted. Based on the publicly available draft, the proposed regulation also covers AI-related provisions, primarily focus on general principles for the use of AI in Indonesia. The draft also includes a requirement to notify the government regarding AI development and deployment. It remains to be seen how this requirement will be implemented in practice.
Last review date: 30 December 2025
In general, there is no specific regulation on non-personal data in Indonesia. Consequently, the treatment of non-personal data largely depends on contractual arrangements between parties (e.g., confidentiality, sharing, and disclosure agreements).
That said, there are several regulations that touch upon non-personal data or cover general provisions that apply to non-personal data. For example:
- The EIT Law
- Law No. 8 of 1997 on Corporate Documents
In addition, sector-related regulations cover specific treatments or restrictions towards non-personal data, such as regulations in the e-commerce, financial, healthcare, and natural resources sectors.