Authority of the PDP Agency in Protecting Data

The Ministry of Communication and Digital Affairs (“Komdigi”) is currently finalizing a Draft Regulation of the President (“RPerpres”) on the Personal Data Protection (“PDP”) Agency. The establishment of the PDP Agency is a direct implementation of Article 58 paragraph (5) of Law No. 27 of 2022 on Personal Data Protection (“PDP Law”).

“It has been submitted to the State Secretariat for the President’s approval since November 2025,” said Teguh Arifiyadi, Director of Supervision of Electronic Certification and Transactions at Komdigi, to Hukumonline.

Based on the draft obtained by Hukumonline, the PDP function is currently still under Komdigi as stipulated in Presidential Regulation No. 174 of 2024 (“Perpres 174/2024”) and must be integrated into the PDP Agency no later than one year. Under the transitional provisions, if the PDP Agency has not yet been established, the mechanism for imposing administrative sanctions will be handled by the Directorate General of Digital Space Supervision (“Ditjen Wasdigi”) until the transition process is completed.