Indonesian House of Representatives passes the Data Protection Bill into law

After years of discussions, as of 20 September 2022, the Indonesian House of Representatives (HOR) has passed the Personal Data Protection Bill into Law (PDP Law). However, the PDP Law is yet to be effective and is not binding, as it still needs to be ratified by the President of the Republic of Indonesia at the latest by 30 days as of enactment by the HOR.

The PDP Law will regulate more specific provisions on the, among others, collection, processing, retention, transfer, and deletion of personal data including exhaustive obligations of the data controller.  It is worth noting that the PDP Law adopts an extraterritorial approach which is subject to certain qualifications. Therefore, it is also interesting to understand more about how an offshore data controller/processor complies to the PDP Law.

A follow-up publication will be issued to discuss the PDP Law in detail.



Authored by Chalid Heyder, Teguh Darmawan, and Andera Rabbani.

Chalid Heyder
Office Managing Partner
Teguh Darmawan
Andera Rabbani


This website is operated by Hogan Lovells International LLP, whose registered office is at Atlantic House, Holborn Viaduct, London, EC1A 2FG. For further details of Hogan Lovells International LLP and the international legal practice that comprises Hogan Lovells International LLP, Hogan Lovells US LLP and their affiliated businesses ("Hogan Lovells"), please see our Legal Notices page. © 2024 Hogan Lovells.

Attorney advertising. Prior results do not guarantee a similar outcome.