Indonesia’s Data Protection Act now in force
Indonesia’s Personal Data Protection Law, approved by Indonesia’s Parliament on 20 September 2022, came into force on 17 October 2022.
The law has a two-year transitional period. It introduces GDPR-like rights and obligations, such as Data Protection Officer and Data Protection Impact Assessment requirements. Non-compliance is subject to fines of up to 2% of the annual revenue of the data controller.
We will publish a full analysis of this law in the next issue of PL&B International Report.