Personal-Data Protection under the ITE Framework

The Ministry of Communication and Informatics (“Ministry”) recently issued Regulation No. 20 of 2016 on Personal-Data Protection Within Electronic Systems (“Regulation 20/2016”).Regulation 20/2016 is basically an implementation of Article 15 (3) of Government Regulation No. 82 of 2012 on the Organization of Electronic Systems and Transactions (“Government Regulation 82/2012”), which required further guidelines to be set regarding the protection of personal data during the organization of any electronic systems. [1] In essence, these guidelines address the following areas: