Indonesia Mandates Facial Biometrics and ISO 27001 for Mobile Subscriber Registration

Indonesia's Ministry of Communication and Digital regulation, Permenkomdigi No. 7/2026, requires mobile subscriber registration for prepaid, postpaid and eSIM services to use a national identity number combined with facial biometric verification. The regulation, fully in force since 1 July 2026, sets a minimum face-matching accuracy of 95 percent, mandates liveness detection for self-registration, limits prepaid numbers to three per identity per operator, requires starter packs to be sold inactive, and obliges providers to hold ISO 27001 certification.

Violations carry graduated administrative sanctions, from written warnings up to temporary suspension of services. In early November, the ministry highlighted facial biometric verification under the regulation as one of its national digital resilience achievements, as reported by Antara.

As of July 2026, the government stated that around 6.8 million people had completed biometric registration, an official figure that has not been independently audited. The full technical annex is available through the JDIH BPK regulatory database.