Indonesia · Legislation
Indonesia UU No. 27/2022 has been enacted.
Indonesia's comprehensive data protection law, modeled in part on the GDPR, which became fully enforceable on October 17, 2024 after a two-year transition period. It covers all personal data processing within and outside Indonesia that has legal effect on Indonesian citizens, with administrative fines up to 2% of annual revenue and criminal penalties up to six years imprisonment for violations; however, implementing regulations and the dedicated PDP Agency remain under development as of April 2026.
Law on Personal Data Protection (Undang-Undang Perlindungan Data Pribadi)
Topics this bill touches, used to group it with related legislation.
Read the bill text and legislative history at the source.
Put this record in front of EcoGPT and ask follow-up questions.
What would Indonesia UU No. 27/2022 require of companies that handle personal data?