Derivatives of the PDP Law, Data Protection Agency to be Formed Soon

Discussions related to the Draft Regulation of the Government (“RPP”) on Personal Data Protection (“PDP”) and the Draft Regulation of the President (“RPerpres”) on the PDP Agency have been completed by the Ministry of Communication and Digital Affairs (“Komdigi”). The Head of the Legal Bureau of the Ministry of Communication and Digital Affairs, Radita Ajie, revealed that the two regulations are targeted to be issued simultaneously before the end of 2025.

“The hope is that they can be issued simultaneously before the end of this year. So that their retroactive application can provide space for Business Actors to prepare,” Ajie told Hukumonline.

In the future, the PDP Agency will be authorized to determine technical policies, supervise compliance, enforce administrative law, and facilitate dispute resolution. Meanwhile, the RPP on PDP, which is a derivative of Law No. 27 of 2022 on PDP (“PDP Law”) will regulate in more detail the rights and obligations of data owners and controllers, procedures for processing and transferring data abroad, compliance monitoring, and dispute resolution mechanisms.

“Both regulations have been submitted to the Ministry of State Secretariat (Setneg) and are awaiting the President’s signature,” he added.