When did Indonesia's PDP Law take full effect?

Law No. 27 of 2022 had a two year transition period that ended in late 2024, by which organisations were expected to comply, while a dedicated supervisory agency is being established.

Are there criminal penalties under Indonesia's PDP Law?

Yes. Beyond administrative fines up to 2 percent of annual revenue, the law includes criminal penalties for unlawful collection, disclosure, or use of personal data.

Asien og Stillehavsområdet

Cookiesamtykke i Indonesia

Samtykke og databeskyttelse i Indonesia

Indonesia enacted its first comprehensive Personal Data Protection Law, Law No. 27 of 2022, with a two year transition period that ended in late 2024, and a dedicated supervisory agency is being established. The law is modelled on the GDPR, with lawful bases, data subject rights, breach notification within 72 hours, and the appointment of data protection officers in certain cases. Consent must be explicit and recorded, and processing of children's data needs parental consent. Administrative fines can reach 2 percent of annual revenue, and there are criminal penalties for unlawful collection or disclosure. Notices in Bahasa Indonesia are expected. Cookies that identify users are personal data.

Tilsynsmyndighed

Personal Data Protection Agency (under MComdigi, being established)

Status

Personal Data Protection Law No. 27 of 2022, with a transition period to 2024

Primær lov

PDP Law

Sprog

Bahasa Indonesia

Hvem er omfattet

Public and private data controllers and processors that process personal data of individuals in Indonesia, including those abroad with effects on people in Indonesia.

Sanktioner

Administrative fines up to 2 percent of annual revenue, plus criminal penalties

Vigtigste forpligtelser

Obtain valid, explicit and recorded consent where it is the basis
Provide clear notice of purpose and retention
Honor access, correction, erasure and objection rights
Appoint a data protection officer for certain processing
Notify breaches to the authority and affected individuals within the required time

Lokal vejledning

Comply with Law No. 27 of 2022 after the 2024 transition
Use explicit, recorded consent
Notify breaches within 72 hours
Provide notices in Bahasa Indonesia

Sådan hjælper ConsentX

Explicit, recorded opt-in consent capture
Clear purpose and retention notice
Rights request workflow with evidence
Consent receipts for audit
Region rule engine tuned for Indonesia

Kom gratis i gang

yoursite.com

Indonesia

Vi værner om dit privatliv

Vi beder om dit samtykke før enhver ikke-nødvendig cookie, efter de regler der gælder i din region.

Tillad alleAfvis ikke-nødvendigeAdministrér præferencer

Samtykke registreret

sha256 · chain ok

Denne side er maskinoversat og kan indeholde fejl. Få de juridiske detaljer gennemgået af en kvalificeret lokal juridisk rådgiver, før du forlader dig på den.

Gør Indonesia klar med ConsentX

Regionsbestemte bannere, forudgående scriptblokering, DSAR og manipulationssikret dokumentation.

Kom gratis i gang Book en demo

Sådan overholder du Indonesia med ConsentX

1
Scan dit website
Kør en gratis scanning for at finde hver cookie og tracker på dit website, så du ved præcis, hvad der kræver samtykke efter Indonesia.
2
Vis et regionsbestemt samtykkebanner
Tilføj ConsentX-banneret. Det registrerer hver besøgendes region og viser automatisk den samtykkeoplevelse, som Indonesia kræver.
3
Blokér trackere indtil samtykke
Hold ikke-nødvendige cookies og trackere blokeret, indtil den besøgende accepterer, så intet udløses før samtykket.
4
Registrér manipulationssikret dokumentation
Hvert valg gemmes som en manipulationssikret samtykkekvittering, som du kan fremlægge ved et Indonesia-tilsyn.
5
Håndtér anmodninger til tiden
Brug det indbyggede DSAR-workflow med SLA-timere til at besvare anmodninger om indsigt, sletning og fravalg inden for fristen.