Asia-Pacific · 1 law · 9 requirements
Indonesia: the laws your website or app must follow
If your customers are in Indonesia, these are the privacy, consumer, security, accessibility and AI laws SafeLaunch checks your site against, with what each one requires and where in the law it says so.
Coming up in Indonesia
- 2027-01-16 · Indonesia PDP Law (Law 27/2022): Implementing regulation GR 33/2026 applies from 16 January 2027; the supervisory agency is still being set up.
How a SafeLaunch audit checks each one
- CheckedChecked automatically on every scan
- AI reviewLooked for by the AI analysis, reported only with evidence
- Your answersDecided from your answers to the audit questions
- PreparedPrepared for you in the report's compliance pack
- You confirmA scan can't see this; you need to confirm it
Indonesia PDP Law (Law 27/2022)
Fully in force since 17 October 2024.
Who it covers: Anyone processing personal data in Indonesia, and those abroad whose processing has legal effect in Indonesia or on Indonesian citizens.
What it requires of a website or app (9)
- A privacy notice at collection: who you are and how to reach you, purposes, legal basis, the data collected, how long it's kept, people's rightsCheckedPDP Law Art. 21 (information before processing)
- A lawful basis, often consent, for each use of personal dataAI reviewPDP Law Art. 20 and 22 (lawful bases; consent)
- People can access, correct and delete their data, and know how to askCheckedPDP Law Art. 5–13
- Reasonable securityCheckedPDP Law Art. 35–39
- Transfers abroad only with the safeguards the law setsCheckedPDP Law Art. 56
- Breach notification: People and the supervisory agency in writing within 3 × 24 hoursPreparedPDP Law Art. 46
- Extra protection, usually explicit consent, for sensitive data (if if you handle sensitive data)Your answersPDP Law Art. 4(2) (specific personal data)
- A parent's consent for children's data (if if children use the product)Your answersPDP Law Art. 25 (consent of a parent or guardian)
- Appoint a data protection officerPreparedPDP Law Art. 53
Sources:DLA Piper: Data protection laws of the world: Indonesia
Check your site against Indonesia's rules
A free scan checks your website or app against these rules in about a minute and shows what applies, with evidence from your pages. The full report gives the exact fix for each finding.
Check my site freeOne free fix in your inbox each week
A new copy-paste prompt for Lovable, Cursor or Claude Code every week, with the rule behind it and how to check it worked, plus the Monday briefing on new laws and deadlines. No spam, unsubscribe in one click.
By signing up you agree to get these weekly emails. We send it with Kit, and you can unsubscribe at any time. What we share with Kit is in our privacy notice.
A plain-language summary of what each law requires of a website or app, from the SafeLaunch rulebook, with the provision and official sources. It is not legal advice and not every duty in each law is listed.