Indonesia Submits Draft Regulation for Personal Data Protection Supervisory Body
The Communications and Digital Ministry says the draft presidential regulation establishing the personal data protection supervisory authority has been submitted to the President, with the body targeted for formation in 2026.
Indonesia's Ministry of Communication and Digital (Komdigi) has confirmed that the draft presidential regulation establishing the supervisory body for the Personal Data Protection Law is in its final stage and has been submitted to the President through the government coordinating secretariat. The ministry is also preparing a transition task force ahead of the body's formation.
According to the report, the authority will operate independently with a mandate to receive complaints, conduct supervision and audits, and enforce administrative sanctions under Law No. 27 of 2022 on Personal Data Protection. Its remit also includes assessing cross-border personal data transfers. Komdigi targets establishing the body in 2026.
The regulation has not yet been signed or issued, and no enforcement timeline has been announced. Telecommunications operators, data centers, and electronic system providers fall within the scope of entities the law designates as personal data controllers and processors.