In the midst of the data breach commotion, and after much anticipation, on 17 October 2022, the House of Representatives and the Government have finally enacted the law on personal data protection through Law Number 27 of 2022 on Personal Data Protection (PDP Law). The PDP Law has reduced the uncertainty surrounding Personal Data protection by specifying, among others, the different types of Personal Data, different Subjects’ rights, and Controller and Processor obligations. The most significant features of the PDP Law are that (i) it highlights the requirement to obtain consent from the Subjects, including specifying the elements to be included in a notice submitted by the Controller to the Subjects (ii) it provides more specific requirements on Personal Data processing, (iii) it introduces the concept and related obligations of a Controller and Processor, (iv) it stipulates that a governmental institution will be established to implement Personal Data protection, (v) it creates the role of a Personal Data protection officer, and (vi) it introduces criminal sanctions for breaches of Personal Data protection.

Please see here for further details on Personal Data Protection Law: Client Alert – Personal Data Protection Law

#WeSpeakYourLanguage

FEATURED LAWYERS

Putu Raditya Nugraha, S.H., Adv. LLM
Senior Partner

raditya@umbra.law

Pramudya A. Oktavinanda, S.H, LLM, PhD
Managing Partner

pramoctavy@umbra.law