After more than two years in the pipeline, the Indonesian Parliament finally passed the long-awaited personal data protection bill (“PDP Bill”) on 20 September 2022. Once the PDP Bill is enacted into law, it will be the basis for personal data protection matters in Indonesia, and this means that existing laws that contain personal data protection rules must be brought in line with the provisions of the proposed personal data protection law (“PDP Law”).
The PDP Law sets out normative provisions for personal data protection, as opposed to detailed or practical rules. Thus, the government will have to issue implementing regulations in the future to further regulate the provisions in the PDP Law.
For more information, click here to read the full Legal Update.