Public electronic system operators must store data domestically. Private operators can transfer data abroad under contractual safeguards. MR5 mandates 24-hour content removal for emergency compliance requests.
Key national laws and regulations governing data privacy, cybersecurity, and tech operations in Indonesia — with direct links to primary legal texts.
| Legislation & Statute | Official Text |
|---|---|
Law No. 27/2022 on Personal Data Protection (PDP Law) Comprehensive personal data framework establishing lawful processing bases, cross-border transfer adequacy requirements, and corporate penalties up to 2% of annual revenue for violations. Legislative PowerStatutory Act | View Statute |
Law No. 13/2016 on Patents (Amended by Law No. 6/2023) Governs invention patentability. Article 20 historically required local patent working/manufacturing in Indonesia, which has been contested in multilateral trade forums. Legislative PowerStatutory Act | View Statute |
| Legislation & Statute | Official Text |
|---|---|
Government Regulation No. 71/2019 (PP 71/2019 - PSTE) Mandates public electronic system operators (ESOs) to store and process data domestically in Indonesia. Allows private ESOs to process data offshore subject to law enforcement access provisions. Executive PowerGovernment Regulation | View Statute |
Ministerial Regulation 5/2020 (MR5 / Permenkominfo 5) Requires domestic and foreign Private Scope ESOs to register with Kominfo and comply with expedited content takedown notices (within 4 hours for urgent content) and state access requests. Executive PowerMinisterial Decree | View Statute |
How Indonesia's domestic laws align or conflict with 5 major digital trade agreements: ASEAN DEFA, RCEP, CPTPP, IPEF, and Bilateral DEAs & CEPAs.
Comparing international trade agreements against national laws and digital rights in Indonesia. Select an agreement below to inspect chapter-level postures and court rulings.
Resisting blanket non-disclosure rules to preserve regulatory audit discovery powers.
Draft treaty prohibits forced transfer of proprietary source code and algorithmic weights.
Direct friction with PP 71/2019 Article 21 and Consumer Protection Law No. 8/1999 inspection powers.
Banning disclosure prevents civil society discovery in discriminatory algorithmic credit scoring and gig dispatch.
Accepting digital copyright protection chapters while preserving rapid ministerial takedowns.
Establishes notice-and-takedown safe harbors shielding digital intermediaries.
Severe tension with Permenkominfo No. 5/2020 (MR5) enforcing expedited 4-hour/24-hour takedowns.
MR5 takedown mandates lack judicial review; treaty safe harbors could curtail arbitrary administrative censorship.
Defending compulsory licensing flexibilities under domestic patent statutes.
Encourages patent harmonization without mandating TRIPS-Plus patent term extensions.
Preserves Indonesia Patent Law UU No. 13/2016 Article 20 requiring domestic manufacturing.
Safeguards domestic public health access to affordable generic medicines.
Endorsed ASEAN Guide on AI Ethics; balancing innovation with voluntary verification.
Chapter 5 adopts regional AI safety baselines and interoperable testing sandboxes.
Harmonized with Kominfo Circular Letter No. 9/2023 on Artificial Intelligence Ethics.
Voluntary ethical guidelines provide zero binding judicial redress for algorithmic bias or displacement.
Formal reservation defending PDP Law adequacy tiers and public sector data localization.
Draft Chapter 2 requires free cross-border data flows with ASEAN Model Contractual Clauses.
Collides with Government Regulation PP 71/2019 and PDP Law No. 27/2022 Article 56 adequacy tiers.
Treaty preemption could erode citizen rights to enforce offshore data processor liability in breaches.
Statutory risk levels are determined strictly by enacted domestic legislation, multilateral treaty commitments, and procedural safeguards rather than arbitrary numerical scores.
Digital trade agreements Indonesia is negotiating or party to — tracking national positions, ratification progress, reservations, and negotiation timelines.
Active member state in 9-chapter DEFA negotiations. National delegation participating in SEOM text scrubbing ahead of planned November 2026 signing ceremony.
Provisional reservations filed on Chapter 2 (Data Flows); scrubbing ongoing
Ministry of Trade (Kemendag) & Ministry of Communication and Digital Affairs (Komdigi / formerly Kominfo)
US-led Indo-Pacific Economic Framework launched. ASEAN participants: Brunei, Indonesia, Malaysia, Philippines, Singapore, Thailand, Vietnam. Digital economy pillar included.
Formally ratified by national parliament
Coordinating Ministry for Economic Affairs (Kemenko Perekonomian)
IPEF partners reach substantial conclusion on digital economy pillar covering data flows, AI governance, and online consumer protections.
Formally ratified by national parliament
Coordinating Ministry for Economic Affairs (Kemenko Perekonomian)
Indonesia formally applies for CPTPP membership. Domestic economic reform packages align with CPTPP requirements including digital trade chapter.
Subject to ongoing multilateral negotiating rounds
Coordinating Ministry for Economic Affairs (Kemenko Perekonomian) & Ministry of Trade (Kemendag)
European Commission publishes official negotiated texts of EU-Indonesia Comprehensive Economic Partnership Agreement. Chapter 10 establishes digital trade disciplines while safeguarding personal data protection autonomy.
Formally ratified by national parliament
Ministry of Trade (Kemendag) & Ministry of Foreign Affairs (Kemlu)
Recent regulatory developments, investigations, and reporting tagged to Indonesia or regional ASEAN impact.
No dispatches or investigative reports currently tagged for Indonesia.
