Regulation of the Government No. 33 of 2026 strengthens the Personal Data Protection framework through more detailed requirements on lawful processing, data subject rights, corporate actions, and cross-border transfers, while granting the Institution authority to impose administrative sanctions, including fines of up to 2% of the annual revenue or receipts of Personal Data Controllers and Personal Data Processors based on the applicable violation variables.

This Draft Bill centralizes national data governance under the One Data Indonesia (Satu Data Indonesia - ?SDI?) Agency (Badan Satu Data Indonesia - ?BSDI?), overseen by an independent board appointed by Indonesia?s House of Representatives (Dewan Perwakilan Rakyat ? ?DPR?). It mandates localized storage for national baseline data requires DPR approval for cross-border transfers, and enforces human oversight for AI systems. Additionally, the Draft Bill establishes a multi-tiered dispute framework and imposes strict criminal liabilities (e.g. prison terms, heavy fines, and permit revocations) on individuals and corporations.

The Financial Services Authority is currently finalizing a regulatory framework mandating stringent information technology governance, cyber resilience, and risk management standards for operators in the capital market, derivative finance, and carbon exchange sectors. This draft requires critical infrastructure mapping, mandatory localized data centers, continuous cyber maturity assessments, and immediate incident reporting.

The MK has issued a decision requiring Operators to provide telecommunications service options protecting users? remaining paid data quotas, which the MK recognizes as users? intangible property rights. Protection may include data accumulation or rollover, validity-period extension, transfer of benefits, compensation, refund, or other forms of protection, without additional fees or charges.

Circular of the Director General of Intellectual Property No. HKI-14.KI.05.02 of 2026 is implementing the centralized issuance of electronic patent certificates through the Intellectual Property Administration System (Sistem Administrasi Kekayaan Intelektual/SAKI), requiring applicants and intellectual property consultants to independently download and print the certificates to simplify administration and expedite access to proof of patent ownership.

The Draft Bill introduces a modern regulatory framework that formally recognizes information technology-based transportation, autonomous vehicles, and electric vehicles. It also requires application companies to provide social security protection for their driver-partners. In addition, the Draft Bill strengthens the enforcement regime for over dimension and overloading violations by introducing stricter administrative sanctions and establishes a maximum operational age for public transportation vehicles.

This Regulation establishes the SPP-TDLN framework and designates banks and non-bank institutions that facilitate overseas digital transactions (Issuers) as Other Parties responsible for collecting, depositing, and reporting PPN on foreign digital transactions. Other Parties must collect PPN using the 11/111 formula, submit transaction data, and protect certain account information through hash functions. They must also issue bill statements equivalent to tax invoices and remit PPN within seven days, with data submission and remittance constituting the Periodic PPN Return.

The Financial Services Authority (Otoritas Jasa Keuangan ? ?OJK?) has restructured the reporting framework for organizers of digital financial asset trading through the elimination of daily reporting and business plan realization obligations. This has resulted in the centralization of regulatory submissions through the OJK Reporting System, as well as the introduction of more detailed disclosures for higher-risk activities such as derivatives, margin and staking. The new framework will become effective on 1 September 2026, while certain provisions will be subject to phased implementation, including the elimination of business plan realization reporting obligations on 1 January 2027.

The Ministry of Micro, Small and Medium Enterprises has introduced new mandatory standards for KBD that are initiated between UMK and PPMSE. The new framework mandates written agreements, enforces specific service fee structures and requires major platforms to provide at least a 50% discount on service fees for UMK that sell domestic products. The overall goal is to balance market dynamics and support local economic growth.

The Draft Regulation will require all e-commerce platforms to restructure their digital partnerships with micro- and small-scale enterprises through written agreements that meet minimum clause requirements. The new framework also introduces a service-fee discount of at least 50% for verified business actors that exclusively sell domestically produced goods.