The PDP Law will regulate more specific provisions on the, among others, collection, processing, retention, transfer, and deletion of personal data including exhaustive obligations of the data controller. It is worth noting that the PDP Law adopts an extraterritorial approach which is subject to certain qualifications. Therefore, it is also interesting to understand more about how an offshore data controller/processor complies to the PDP Law.
A follow-up publication will be issued to discuss the PDP Law in detail.
Authored by Chalid Heyder, Teguh Darmawan, and Andera Rabbani.