When did Indonesia's PDP Law take full effect?

Law No. 27 of 2022 had a two year transition period that ended in late 2024, by which organisations were expected to comply, while a dedicated supervisory agency is being established.

Are there criminal penalties under Indonesia's PDP Law?

Yes. Beyond administrative fines up to 2 percent of annual revenue, the law includes criminal penalties for unlawful collection, disclosure, or use of personal data.

Asia-Pacifico

Consenso ai cookie in Indonesia

Consenso e privacy in Indonesia

Indonesia enacted its first comprehensive Personal Data Protection Law, Law No. 27 of 2022, with a two year transition period that ended in late 2024, and a dedicated supervisory agency is being established. The law is modelled on the GDPR, with lawful bases, data subject rights, breach notification within 72 hours, and the appointment of data protection officers in certain cases. Consent must be explicit and recorded, and processing of children's data needs parental consent. Administrative fines can reach 2 percent of annual revenue, and there are criminal penalties for unlawful collection or disclosure. Notices in Bahasa Indonesia are expected. Cookies that identify users are personal data.

Autorità

Personal Data Protection Agency (under MComdigi, being established)

Stato

Personal Data Protection Law No. 27 of 2022, with a transition period to 2024

Legge principale

PDP Law

Lingue

Bahasa Indonesia

Chi deve conformarsi

Public and private data controllers and processors that process personal data of individuals in Indonesia, including those abroad with effects on people in Indonesia.

Sanzioni

Administrative fines up to 2 percent of annual revenue, plus criminal penalties

Obblighi principali

Obtain valid, explicit and recorded consent where it is the basis
Provide clear notice of purpose and retention
Honor access, correction, erasure and objection rights
Appoint a data protection officer for certain processing
Notify breaches to the authority and affected individuals within the required time

Indicazioni locali

Comply with Law No. 27 of 2022 after the 2024 transition
Use explicit, recorded consent
Notify breaches within 72 hours
Provide notices in Bahasa Indonesia

Come ti aiuta ConsentX

Explicit, recorded opt-in consent capture
Clear purpose and retention notice
Rights request workflow with evidence
Consent receipts for audit
Region rule engine tuned for Indonesia

Inizia gratis

yoursite.com

Indonesia

Teniamo alla tua privacy

Ti chiediamo il consenso prima di qualsiasi cookie non essenziale, secondo le regole che si applicano nella tua regione.

Accetta tuttoRifiuta i non essenzialiGestisci preferenze

Consenso registrato

sha256 · chain ok

Questa pagina è stata tradotta automaticamente e può contenere errori. Fai verificare i dettagli legali a un legale locale qualificato prima di farvi affidamento.

Prepara Indonesia con ConsentX

Banner per regione, blocco preventivo degli script, DSAR e prove a prova di manomissione.

Inizia gratis Prenota una demo

Come conformarsi a Indonesia con ConsentX

1
Analizza il tuo sito
Esegui una scansione gratuita per trovare ogni cookie e tracker del tuo sito, così sai esattamente cosa richiede il consenso secondo Indonesia.
2
Mostra un banner adattato alla regione
Aggiungi il banner ConsentX. Rileva la regione di ogni visitatore e mostra automaticamente l esperienza di consenso richiesta da Indonesia.
3
Blocca i tracker fino al consenso
Mantieni bloccati i cookie e i tracker non essenziali finché la persona non acconsente, così nulla si attiva prima del consenso.
4
Registra prove a prova di manomissione
Ogni scelta viene conservata come ricevuta di consenso a prova di manomissione, da esibire in un audit Indonesia.
5
Gestisci le richieste nei tempi previsti
Usa il flusso DSAR integrato con timer SLA per rispondere alle richieste di accesso, cancellazione e opposizione entro il termine di legge.