The principal law governing data protection in Indonesia is Law No. 11 of 2008 regarding Electronic Information and Transactions. In addition, rules governing personal data protection are also found in Government Regulation No. 71 of 2019 regarding the Implementation of Electronic Systems and Transactions and Minister of Communication and Informatics. What are the key principles that apply to personal data processing?