Minister of Communication and Digital Affairs Prepares Instruction on Personal Data Protection Implementation

The government has reaffirmed its commitment to strengthening personal data governance within government agencies and private electronic system operators (Penyelenggara Sistem Elektronik –“PSE”) through the issuance of Instruction of Minister of Communication and Digital Affairs (“Menkomdigi”) on the Implementation of Personal Data Protection. The Instruction mandates the acceleration of compliance with cybersecurity standards, the appointment of Data Protection Officers (“DPO”), and the conduct of Data Protection Impact Assessments (“DPIA”).

“The Instruction is currently undergoing a review process before being submitted to the initiating work unit for initialing,” an internal source at the Ministry of Communication and Digital Affairs told Hukumonline.

The Instruction is being prepared in response to the full implementation of Law No. 27 of 2022 on Personal Data Protection (“PDP Law”) and its implementing regulations, such as Government Regulation No. 33 of 2026. In addition to serving as a concrete standard operating procedure (“SOP”) for government agencies managing data, the policy also requires technical alignment with the implementation of the One Data Indonesia (Satu Data Indonesia – “SDI”) Law, which promotes open data sharing, to prevent violations of the purpose limitation principle.