Does Indonesia's PDP Law require explicit consent?

Where consent is the basis it must be valid, explicit, informed and clearly recorded.

When does Indonesia's PDP Law fully apply?

The law was enacted in 2022 with a transition period running through 2024 for organizations to comply.

Indonesia

PDP Law

Personal Data Protection Law (Law 27 of 2022)

Na kratko

Indonesia's PDP Law is a GDPR-inspired consent regime. Processing based on consent requires valid, explicit and informed consent recorded clearly, with stricter handling for specific categories of personal data.

Regija

Indonesia

Stanje

Enacted 2022, transition through 2024

Skupina

Azija in Afrika

Za koga velja

Public and private data controllers and processors that process personal data of individuals in Indonesia, including those abroad with effects on people in Indonesia.

Sankcije

Administrative fines up to 2% of annual revenue, plus criminal penalties and corporate fines for unlawful collection or disclosure.

Ključne obveznosti

Obtain valid, explicit and recorded consent where it is the basis
Provide clear notice of purpose and retention
Honor access, correction, erasure and objection rights
Appoint a data protection officer for certain processing
Notify breaches to the authority and affected individuals within the required time

Kako pomaga ConsentX

Explicit, recorded opt-in consent capture

Clear purpose and retention notice

Rights request workflow with evidence

Consent receipts for audit

Region rule engine tuned for Indonesia

Pripravite PDP Law s ConsentX

Začnite brezplačno Rezervirajte predstavitev

Ta stran je strojno prevedena in lahko vsebuje napake. Preden se nanjo zanesete, naj pravne podrobnosti pregleda usposobljen lokalni pravni svetovalec.

Kako izpolniti zahteve predpisa PDP Law s ConsentX

1
Preglejte svoje spletno mesto
Zaženite brezplačen pregled, da najdete vsak piškotek in sledilnik na spletnem mestu in natančno veste, kaj po predpisu PDP Law zahteva privolitev.
2
Prikažite pasico privolitve glede na regijo
Dodajte pasico ConsentX. Zazna regijo vsakega obiskovalca in samodejno prikaže izkušnjo privolitve, ki jo zahteva PDP Law.
3
Blokirajte sledilnike do privolitve
Nenujne piškotke in sledilnike naj ostanejo blokirani, dokler obiskovalec ne privoli, da se pred privolitvijo nič ne sproži.
4
Zabeležite dokaz, odporen na spreminjanje
Vsaka izbira se shrani kot potrdilo o privolitvi, odporno na spreminjanje, ki ga lahko predložite pri nadzoru po predpisu PDP Law.
5
Zahteve obravnavajte pravočasno
Uporabite vgrajen postopek DSAR s časovniki SLA za odgovore na zahteve za dostop, izbris in ugovor v zakonskem roku.