Member Article

Following our previous Advisory on Indonesia’s long-awaited Law No. 27 of 2022 on Personal Data Protection (the “PDP Law”) (view the Advisory here), this Advisory focuses on the transfer of personal data from Indonesia to other countries (cross-border transfers).

The PDP Law is binding on all parties that process or control personal data in or outside Indonesia with a legal impact in Indonesia or on Indonesian data subjects. Companies must comply with the PDP Law to protect the rights of data subjects during cross-border data transfers. Full compliance is required by October 17, 2024, with a two-year transitional period as of the law's enactment.