The main legal and regulatory framework governing data protection in Indonesia is Law No. 27 of 2022, dated October 17, 2022, regarding Personal Data Protection (“PDP Law”). The PDP Law applies both domestically and extraterritorially. It provides the general principles governing the processing of personal data in Indonesia and the legal bases for the collection … Data Protection in Indonesia: A Brief Overview
SSEK Law Firm is recognized in Hukumonline’s Practice Leaders 2025, with the firm named an Elite One firm in 20 practice areas. This recognition reflects the strength and breadth of SSEK’s expertise across key sectors, as well as the outstanding contributions of our lawyers to the Indonesian legal landscape. SSEK was recognized in the following … SSEK Named Elite One in Hukumonline’s 2025 Practice Leaders Rankings
SSEK Law Firm has been recognized in Hukumonline’s Top 100 Indonesian Law Firms 2025 and Practice Leaders 2025 rankings. For Top 100 Indonesian Law Firms 2025, SSEK was ranked in several key categories: Top 100 Indonesian Law Firms Best Full-Service Law Firms Top 50 Largest Full-Service Law Firms Law Firms with the Most Female Partners Best … SSEK Recognized in Hukumonline’s 2025 Rankings for Top Law Firms and Practice Leaders
The Indonesian government has taken a significant step toward strengthening child protection in the digital environment with the issuance of Government Regulation No. 17 of 2025, dated March 27, 2025, regarding the Governance of Electronic System Implementation in Child Protection (“GR 17/2025”). This regulation imposes binding obligations on Electronic System Providers (“ESPs”) – both public … GR 17/2025: Indonesia Imposes Child Protection Duties on Online Platforms
SSEK Law Firm has contributed the Indonesia chapter to the Legal 500 Data Protection & Cybersecurity 2025 global guide. SSEK partners Winnie Yamashita Rolindrawan and Nico Mooduto and associate Agung Kurniawan Sihombing provide a pragmatic overview of data protection and cybersecurity laws and regulations in Indonesia. They provide information about privacy, personally identifiable information (PII), service providers … New Global Guide Highlights Indonesia’s Data Protection and Cybersecurity Landscape
SSEK Law Firm partner Ira A. Eddymurthy and senior associate A. Charlie R. Malessy have contributed a Q&A guide to Doing Business in Indonesia. This guide, published by Thomson Reuters Practical Law, provides a high-level overview of key matters to consider when doing business in Indonesia, including foreign investment, business vehicles, environment, employment, competition, intellectual … Doing Business in Indonesia – Practical Law Guide
Law No. 27 of 2022 regarding Personal Data Protection (PDP Law), the main legislation in Indonesia concerning the protection of personal information (PI), does not specify the retention period to which personal data controllers must adhere. However, the law does stipulate that personal data shall be destroyed or deleted after the expiry of the retention … Quick Look at Data Retention Requirements in Indonesia
Indonesia’s Personal Data Protection (PDP) Law stipulates that personal data is the data of individuals that can be directly or indirectly identified, either on their own or in combination with other information. The PDP Law provides three types of personal data relevant to health data, which are: health data and information: individual records or … What Constitutes ‘Health Data’ in Indonesia?
SSEK Law Firm co-hosted the Asia Multilateral Training Session (AMTS) on AI and Tech, held in Jakarta from November 14 -16. The event was organized by Slaughter and May and Allen & Gledhill. Lawyers from 25 law firms from Asia and Europe gathered in Jakarta to hear from experts and discuss some of the hottest … SSEK Co-Hosts AMTS Event on AI and Tech
Indonesia’s Law No. 27 of 2022 regarding Personal Data Protection (PDP Law) requires a personal data controller to have a legal basis for carrying out personal data processing, which includes: a valid and explicit consent from the personal data subject for one or more specific purposes conveyed by the personal data controller to the … Legitimate Processing of Personal Information in Indonesia
