SentraMind
中文 Private Evaluation
← All jurisdictions

Jurisdiction record

Indonesia

Indonesia

The law is in force and its criminal provisions and breach clock are live, but the implementing regulation and supervisory authority remain pending. We position for readiness, not for a settled regime.

Orientation only, not legal advice. Every fact carries its own review date.

Market-prerequisite record

Prerequisites recorded

Government deals require IndoCC / SCCI product evaluation under BSSN Regulation 7/2024, and a TKDN local-content check. These are prerequisites — the portal does not represent government availability ahead of them.

Sourced facts

Instruments and current record

From primary-source record to product interpretation
UU PDP — Law 27/2022 PP 71/2019 BSSN regulations and Perpres 82/2022 POJK 11/2022 and SEOJK 29/2022 PBI 2/2024
Separately labelled interpretation Bounded product mapping

This path describes content governance; it does not represent certified legal compliance.

UU PDP — Law 27/2022

Undang-Undang Perlindungan Data Pribadi. Criminal provisions and the 3×24-hour breach clock are already live. The implementing PP and the supervisory authority were still pending as of mid-2026.

Primary-source record UU No. 27 Tahun 2022

PP 71/2019

Electronic system operator obligations, including onshore requirements in public scope. Under revision.

Primary-source record PP No. 71 Tahun 2019

BSSN regulations and Perpres 82/2022

Vital information infrastructure designation and protection.

Primary-source record Perpres No. 82 Tahun 2022; BSSN regs

POJK 11/2022 and SEOJK 29/2022

Banking technology risk and information security.

Primary-source record POJK 11/2022; SEOJK 29/2022

PBI 2/2024

Payment system obligations.

Primary-source record PBI No. 2 Tahun 2024

Product mapping

Detector-pack direction

NIK — 16 digits. Province, regency and district codes, then DDMMYY where the day field carries a +40 offset for women. Without that offset a naive date parse rejects half the population.

This maps deterministic detector content; it is not a claim of complete legal compliance.

Run browser demonstration

Interpretation

Classification mapping

Government classification mapped through the configurable taxonomy; Microsoft MIP label mapping feeds the same policy conditions.

Customers should confirm applied policy with qualified counsel and security owners.

Watch items

Not treated as current fact

  • Implementing PP under UU PDP
  • Establishment of the supervisory authority
  • PP 71/2019 revision

Validate the mapping in evaluation

Confirm current primary sources, applicability, and product maturity before selecting test cases.

Request a Private Evaluation