Indonesia passes its long-awaited data protection bill: Key implications for your business

On 20 September 2022, Indonesia’s House of Representatives finally passed into law the long-awaited Data Protection Bill.

The Data Protection Law marks a new era for the privacy law regime in South East Asia’s most populous market, as the first overarching regulation on data protection. Indeed, the Law comes at a right time, amidst various high-profile data breaches in Indonesia that have recently put data management in the headlines.

Although passed by the House of Representatives, an official copy of Law is yet to be published, pending signature by Indonesia’s President within 30 days of the House’s decision. The final Law is therefore expected to be published and enacted by mid-October 2022.

This alert summarises some of the key highlights under the Law.