Personal Data Protection Law (Indonesia)- PDP Law

The Personal Data Protection Law (PDP Law) is Indonesia’s comprehensive data protection legislation governing the collection, processing, storage, disclosure, and protection of personal data by public and private entities. Enacted in 2022, the law establishes obligations for data controllers and processors, grants individuals rights over their personal data, regulates sensitive personal data processing, introduces consent and transparency requirements, and provides rules for data breach notification and cross-border data transfers. The PDP Law represents Indonesia’s first dedicated privacy framework and aligns with global data protection standards, including principles similar to the EU GDPR.