Expertise: Data protection

E-commerce in Indonesia – Security

By regulation, an electronic system provider in Indonesia is obligated to guarantee the security of the software used to facilitate and administer the electronic system services, as well as to assure that an information security agreement is available. In practice, an electronic system provider is required to establish a security system that has a system E-commerce in Indonesia – Security

SSEK Contributes Chapter on Data Protection in Indonesia

SSEK partner Denny Rahmansyah contributed the Indonesia chapter to the International Comparative Legal Guide to: Data Protection Laws and Regulations 2020. The guide covers common issues including relevant legislation and competent authorities, territorial scope, key principles, individual rights, registration formalities, appointment of a data protection officer and of processors.  

SSEK Managing Partner Quoted in Article on Indonesia’s Data Protection Bill

Denny Rahmansyah, SSEK’s managing partner, was quoted in a recent article by MLex on Indonesia’s data protection bill. Denny discusses the obligations of data controllers under the data protection bill and the bill’s extraterritorial application. He also touches on the processing of the data of Indonesian nationals outside of Indonesia. Denny has extensive experience advising SSEK Managing Partner Quoted in Article on Indonesia’s Data Protection Bill

Prohibitions, Restrictions Under Indonesia’s Personal Data Protection Draft Law

A draft law on personal data protection (“PDP Draft Law“) has been signed by Indonesian President Joko Widodo and is being discussed by the House of Representatives. Several government officials have been quoted in the media saying they expect the PDP Draft Law to be passed and enacted in 2020. This article looks at some Prohibitions, Restrictions Under Indonesia’s Personal Data Protection Draft Law

With GDPR as Guide, Indonesia Nears Major Changes to Rights of Personal Data Owners

Indonesia appears ready to enact a new law on the protection of personal data. A draft law on personal data protection (“PDP Draft Law“) has been signed by President Joko Widodo and is being discussed by the House of Representatives. Several government officials have been quoted in the media saying they expect the PDP Draft With GDPR as Guide, Indonesia Nears Major Changes to Rights of Personal Data Owners

Indonesia’s New Data Protection Rules Move Toward Passage

After a number of data breaches underlined the urgency of comprehensive data protection rules, Indonesia expects to pass a data protection law in 2020, despite the ongoing COVID-19 pandemic and associated lockdowns. On January 24, 2020, Indonesian President Joko Widodo signed a draft law on personal data protection (the “PDP Draft Law“). The PDP Draft Indonesia’s New Data Protection Rules Move Toward Passage

Cybersecurity and Data Breaches in Indonesia

The Indonesian legal framework for cybersecurity is varied, depending on the context of the crime. However, the main reference would be the Electronic Information Law, Government Regulation 82 regarding the Implementation of Electronic Systems and Transactions, and Minister of Communication and Informatics (MOCI) Regulation 20 regarding the Pro­tection of Personal Data in Electronic Systems (jointly Cybersecurity and Data Breaches in Indonesia

Data Protection and Cybersecurity in Indonesia: Enforcement and Litigation

The Electronic Information Law, Government Regulation 82 regarding the Implementation of Electronic Systems and Transactions, and Ministry of Communication and Informatics (MOCI) Regulation 20 regarding the Pro­tection of Personal Data in Electronic Systems (jointly referred to as the PDP Regulations) do not provide much detail on the standards that must be established by regulators in Data Protection and Cybersecurity in Indonesia: Enforcement and Litigation

Data Protection and Cybersecurity in Indonesia: Online Marketing

Indonesia’s Electronic Information Law, Government Regulation 82 regarding the Implementation of Electronic Systems and Transactions, and Ministry of Communication and Informatics (MOCI) Regulation 20 regarding the Pro­tection of Personal Data in Electronic Systems (jointly referred to as the PDP Regulations) are silent on the sending of unsolicited commercial or marketing communications. While it is not Data Protection and Cybersecurity in Indonesia: Online Marketing