Expertise: Data privacy

Cybersecurity and Data Breaches in Indonesia

The Indonesian legal framework for cybersecurity is varied, depending on the context of the crime. However, the main reference would be the Electronic Information Law, Government Regulation 82 regarding the Implementation of Electronic Systems and Transactions, and Minister of Communication and Informatics (MOCI) Regulation 20 regarding the Pro­tection of Personal Data in Electronic Systems (jointly Cybersecurity and Data Breaches in Indonesia

Data Protection and Cybersecurity in Indonesia: Enforcement and Litigation

The Electronic Information Law, Government Regulation 82 regarding the Implementation of Electronic Systems and Transactions, and Ministry of Communication and Informatics (MOCI) Regulation 20 regarding the Pro­tection of Personal Data in Electronic Systems (jointly referred to as the PDP Regulations) do not provide much detail on the standards that must be established by regulators in Data Protection and Cybersecurity in Indonesia: Enforcement and Litigation

Data Protection and Cybersecurity in Indonesia: Online Marketing

Indonesia’s Electronic Information Law, Government Regulation 82 regarding the Implementation of Electronic Systems and Transactions, and Ministry of Communication and Informatics (MOCI) Regulation 20 regarding the Pro­tection of Personal Data in Electronic Systems (jointly referred to as the PDP Regulations) are silent on the sending of unsolicited commercial or marketing communications. While it is not Data Protection and Cybersecurity in Indonesia: Online Marketing

SSEK Partner Leads Seminar in Korea on Indonesian Legal Developments

SSEK partner Ira A. Eddymurthy gave a presentation in Seoul on Indonesian legal developments, focusing on infrastructure, data privacy and expatriate employment. The event was hosted by Shin & Kim, one of the largest corporate law firms in Korea. About SSEK SSEK is a leading full-service corporate and commercial law firm based in Jakarta. Since SSEK Partner Leads Seminar in Korea on Indonesian Legal Developments

Data Protection and Cybersecurity in Indonesia: Sensitive Data

Indonesia’s Electronic Information Law, Government Regulation 82 regarding the Implementation of Electronic Systems and Transactions, and MOCI Regulation 20 regarding the Pro­tection of Personal Data in Electronic Systems (jointly referred to as the PDP Regulations) do not provide a specific definition of sensitive data, and consequently no special issues apply. There are, however, several laws Data Protection and Cybersecurity in Indonesia: Sensitive Data

Data Protection and Cybersecurity in Indonesia: General Requirements

Indonesia’s Electronic Information Law, Government Regulation 82 regarding the Implementation of Electronic Systems and Transactions, and MOCI Regulation 20 regarding the Pro­tection of Personal Data in Electronic Systems (jointly referred to as the PDP Regulations) require Electronic System Providers (ESPs) to adopt an internal policy related to the protection of personal data for the pur­pose Data Protection and Cybersecurity in Indonesia: General Requirements

A Lesson for Universities in Indonesia on IP and Data Protection

The need for robust protections for intellectual property (“IP“) and confidential data has become only more glaring as we stride fully into the digital era. This applies to companies and business sectors across the board, including the education sector. Universities generate a large amount of IP, whether generated by the universities themselves, including through research A Lesson for Universities in Indonesia on IP and Data Protection

Extraterritorial Scope of GDPR and Its Implications for Companies in Indonesia

The intention behind the issuance of the General Data Protection Regulation (GDPR) is commendable: to standardize and simplify data protection legislation across all European Union countries, so that both EU citizens and businesses (involving EU citizens) can benefit and thrive in our borderless digital era. The aim of the GDPR is to give EU citizens Extraterritorial Scope of GDPR and Its Implications for Companies in Indonesia

Data Protection in Indonesia: Processing Requirements

There are several main obligations that must be fulfilled by an electronic system provider (ESP) under Indonesian Minister of Communication and Informatics (MOCI) Regulation No. 20 of 2016 regarding Personal Data Protection in Electronic Systems (MOCI Regulation 20) to ensure personal data is processed properly. These obligations include:   Conducting certification of the electronic system Data Protection in Indonesia: Processing Requirements