Vendor Reassessments, Architecture Design and Mandatory DPIA? New IT Organization Framework Coming Soon for Banks by March 2026

Following the issuance of Regulation of the Financial Services Authority (Otoritas Jasa Keuangan– “ OJK ”) No. 11/POJK.03/2022 (“ Regulation 11/2022 ”), [1] the OJK now introduce the Regulation of the Board of Commissioners of the OJK No. 1 of 2026 (“ Regulation 1/2026 ”) on Management of Information Technology (“ IT ”) by Commercial Banks (“ Banks ”) which repeals and replace the previous Circular of OJK No. 21/SEOJK.03/2017 (“ Circular 21/2017 ”). [2]