MK Decision No. 151/PUU-XXII/2024: Meeting of Single Criterion Will Now Trigger Mandatory Data Protection Officer Obligation

On 16 July 2025, Indonesia’s Constitutional Court (Mahkamah Konstitusi– “ MK ”) handed down Decision No. 151/PUU-XXII/2024 (“ Decision 151/2024 ”) in response to a petition for a formal judicial review of Law No. 27 of 2022 on Personal Data Protection (“ Law 27/2022 ”). [1] This petition was originally filed on 20 September 2024 by a group of petitioners (collectively referred to as “ Petitioners ”). [2]