ID-PDP-27-2022
Law No. 27 of 2022 on Personal Data Protection
Presidentially designated personal data protection institution (establishment pending)
🇮🇩Indonesia
Skin
Indonesia overview
Indonesia's general privacy law is Law No. 27 of 2022
The Personal Data Protection Law applies inside Indonesia and extraterritorially where conduct has legal effects in Indonesia or affects Indonesian citizens abroad. It distinguishes controllers and processors and covers electronic and non-electronic processing.
Implementation status
The Law took effect on 17 October 2022 and its two-year adjustment period ended in October 2024. As of 23 August 2026, the presidential regulation establishing the dedicated institution under Article 58 was still being finalised according to the Ministry of Communication and Digital Affairs; the database does not falsely present that institution as already operational.
What this means for you
Treat the substantive controller and processor duties as applicable now. Track the forthcoming implementing regulations and regulator formation because they will affect filings, enforcement and procedural detail.