There had been several drafts of the law on Personal Data Protection until the final draft that was submitted by the Indonesian Government to the House of Representatives on 24 January 2020 (“Final Draft Law”). When passed, it will be Indonesia’s first framework legislation to specifically deal with and serve as the ‘umbrella regulation’ on personal data protection.This article discusses and summarizes the main provisions of the Final Draft Law, which hopefully will be passed as the new Personal Data Protection Law this year. The Final Draft Law has 72 Articles in 15 chapters covering the following topics:the definition and types of personal data;

1. the rights of data subjects;
2. the processing of personal data;
3. the obligations of data controllers and processors when processing personal data;
4. transferring personal data;
5. administrative sanctions;
6. prohibitions against certain uses of personal data;
7. the establishment of behavior guidelines for personal data controllers;
8. the dispute resolution over the use of personal data;
9. international cooperation;
10. the roles of the government and the public; and
11. sanctions.

Given the broad scope of the Final Draft Law, this article only focuses on the key points of the Final Draft Law referred to in items 1 to 5 and 12 above and when relevant, discusses some differences between the Final Draft Law and the previous draft law circulated in April 2019 (“April 2019 Draft”). 

Click here to read more.