Expertise: Data Privacy

Indonesia’s Electronic Information Law, Government Regulation 82 regarding the Implementation of Electronic Systems and Transactions, and MOCI Regulation 20 regarding the Pro­tection of Personal Data in Electronic Systems (jointly referred to as the PDP Regulations) require Electronic System Providers (ESPs) to adopt an internal policy related to the protection of personal data for the pur­pose … Data Protection and Cybersecurity in Indonesia: General Requirements

The fundamental basis for privacy and data protection in Indonesia can be found in Article 28(G) of the 1945 Con­stitution of the Republic of Indonesia, which provides that every person has the right to:   protection of themselves, their families, respect, dignity and possessions under their control; and security and protection from threat of fear … Privacy and Data Protection Legal Regime in Indonesia

The intention behind the issuance of the General Data Protection Regulation (GDPR) is commendable: to standardize and simplify data protection legislation across all European Union countries, so that both EU citizens and businesses (involving EU citizens) can benefit and thrive in our borderless digital era. The aim of the GDPR is to give EU citizens … Extraterritorial Scope of GDPR and Its Implications for Companies in Indonesia

There are several main obligations that must be fulfilled by an electronic system provider (ESP) under Indonesian Minister of Communication and Informatics (MOCI) Regulation No. 20 of 2016 regarding Personal Data Protection in Electronic Systems (MOCI Regulation 20) to ensure personal data is processed properly. These obligations include:   Conducting certification of the electronic system … Data Protection in Indonesia: Processing Requirements

There are laws in a number of specific areas in Indonesia that deal indirectly with data privacy. These include: Employment There is no specific stipulation in Indonesian employment laws on the protection of personal data of employees. It would normally be considered sufficient for employers in Indonesia to regulate the protection of the personal data … Data Privacy by Sector in Indonesia

An electronic system provider (ESP) in Indonesia must maintain the correctness, validity, confidentiality, accuracy, relevance and compatibility with the purpose of the acquisition, collection, processing, analysis, retention, display, publication, transmission, dissemination and destruction of personal data. Additionally, an ESP must also carry out certification of its electronic system to ensure it is in accordance with … Data Protection in Indonesia – Security Requirements

With regard to private and family life in Indonesia, Article 28(G) of the 1945 Constitution provides that every person has the right to: (i) Protection of their personal selves, families, respect, dignity and possessions under their control; and (ii) Security and protection from threat of fear for doing, or not doing, something which constitutes a … Protection of Privacy in Indonesia