Overview

The Government has issued Regulation of the Government No. 33 of 2026 (“Regulation 33/2026”) on the Implementation of Law No. 27 of 2022 on Personal Data Protection (“Law 27/2022”), which provides a more detailed operational framework for the implementation of Indonesia’s Personal Data Protection (“PDP”) requirements. While Law 27/2022 established the principal rights of Personal Data Subjects (“Subjects”) and obligations of Personal Data Controllers (“Controllers”) and Personal Data Processors (“Processors”). Please note that Regulation 33/2026 will take effect on 16 January 2027.[1]