Indonesia’s Data Protection Act now in force

Indonesia’s Personal Data Protection Law, approved by Indonesia’s Parliament on 20 September 2022, came into force on 17 October 2022.

The law has a two-year transitional period. It introduces GDPR-like rights and obligations, such as Data Protection Officer and Data Protection Impact Assessment requirements. Non-compliance is subject to fines of up to 2% of the annual revenue of the data controller.

We will publish a full analysis of this law in the next issue of PL&B International Report.