The Indonesian government has recently passed the draft Law on Personal Data Protection (PDP Bill). The PDP Bill is currently being discussed at length in the House of Representatives, and there is no indication of when it will be enacted.
Ratification of the PDP Bill is expected to ensure that, in conjunction with the current regulations, adequate protection of personal data is provided. Based on the European Union’s General Data Protection Regulation (GDPR), the PDP Bill includes international concepts not covered by current regulations, such as data controller, data processor, sensitive personal data, data protection officer, and so forth.