Indonesia's Personal Data Protection Supervisory Body Decree Reaches the President
Komdigi says the draft presidential regulation establishing an independent PDP oversight body has been submitted, with a transition task force prepared and formation targeted for 2026.
Indonesia's Communications and Digital Ministry (Komdigi) confirmed that the draft presidential regulation establishing the Personal Data Protection (PDP) supervisory body has been submitted to the President through the Coordinating Ministry for Political and Security Affairs and the State Secretariat. The body will be independent, with authority to receive complaints, supervise, investigate and impose administrative sanctions under Law 27/2022, including assessing cross-border data transfers. Komdigi has prepared a transition task force and targets formation within 2026.
When the body stands up, data protection compliance for telecom operators, data centres and all electronic system providers shifts from best practice to enforcement risk. Telecommunications operators are among the largest categories of personal data controllers in the country.
The development runs alongside the implementation of the One Data Indonesia law, whose socialization this week emphasized interoperability standards, security and data-use traceability — together forming a tightening regulatory stack for anyone processing personal or government-linked data in Indonesia.