This article was machine-drafted from the sources cited in its footnotes. It is not the official text of any law or court decision, and it is not legal advice (how articles are written).
Data governance in IndonesiaTopic
FieldData governance, personal data protection and electronic systems
JurisdictionIndonesia
Principal instrumentsUndang-Undang 27/2022 on personal data protection; Undang-Undang 11/2008 on electronic information and transactions, as last amended by Undang-Undang 1/2024; Undang-Undang 4/2011 on geospatial information; Peraturan Presiden 39/2019 on Satu Data Indonesia
Principal institutionsMinister responsible for communication and information; Badan Pusat Statistik (Statistics Indonesia); Komite Digital Pemerintah (Government Digital Committee); data custodians (walidata) of central and regional agencies

Data governance in Indonesia is the body of Indonesian law that governs how personal data are protected, how electronic systems and the information they carry are regulated, and how government agencies produce, standardise and share their own data. Its principal statutes are Undang-Undang Nomor 27 Tahun 2022 tentang Pelindungan Data Pribadi, the Personal Data Protection Law, and Undang-Undang Nomor 11 Tahun 2008 tentang Informasi dan Transaksi Elektronik, the Electronic Information and Transactions Law (the ITE Law), as last amended by Undang-Undang 1/2024; Undang-Undang 4/2011 on geospatial information governs maps and spatial data.[1][2][3][4] Government data are organised under Satu Data Indonesia (One Data Indonesia), the policy set by Peraturan Presiden 39/2019 for producing government data that are accurate, current, integrated and accountable, and easy to access and share between agencies.[5]

The Personal Data Protection Law defines personal data as data about an individual who is identified or identifiable, directly or indirectly, alone or combined with other information, through electronic or non-electronic systems, and entrusts its administration to an agency established by and responsible to the President.[6][7] The ITE Law, as amended in 2024, obliges operators of electronic systems to protect children who use them, an obligation implemented in 2025 by a government regulation on child protection online.[3:1]

Much of the field's recent regulation concerns the institutions of government data: the statistics agency, a presidential committee on government digital transformation, an integrated digital service for mineral and coal commodities, a forestry data custodian, and the regional tier of One Data Indonesia. The Constitutional Court has also been asked to read obligations on social media platforms into the ITE Law.[8]

Personal data protection

Undang-Undang 27/2022 was signed and promulgated on 17 October 2022 as Lembaran Negara 2022 No. 196.[1:1] It distinguishes specific personal data, which include health information and biometric and genetic data, from general personal data, and defines the data controller (pengendali data pribadi) as any person, public body or international organisation that, alone or jointly, determines the purposes of and exercises control over the processing of personal data.[9][6:1] Pasal 58 gives the Government a role in the administration of personal data protection, carried out by an agency established by and responsible to the President.[7:1] Controllers, processors and other parties involved in processing were given two years from the law's promulgation to bring their processing into line with it.[10]

Electronic information and transactions

Undang-Undang 11/2008 was signed and promulgated on 21 April 2008 as Lembaran Negara 2008 No. 58.[2:1] Its Pasal 4 lists the aims of using information technology and electronic transactions, from developing trade and the national economy and making public services more effective and efficient to giving users and operators a sense of security, justice and legal certainty.[11] The law carries its own chapter of criminal provisions, a link with criminal law and procedure in Indonesia.[12]

Undang-Undang 1/2024, the law's second amendment, signed and promulgated on 2 January 2024, inserted Pasal 16A, which requires operators of electronic systems to protect children who use or access them, and Pasal 16B, which makes a breach of that duty subject to administrative sanctions.[3:2] Peraturan Pemerintah 17/2025 implements those provisions. It requires operators whose products, services and features are designed for, or likely to be used by, children under 18 to assess each product's risk to children, obtain parental consent, apply high privacy settings by default and verify users' ages; prohibits profiling children and collecting their precise location by default; fixes minimum ages for account ownership linked to a product's risk; and gave operators two years from its promulgation on 27 March 2025 to comply.[13][14][15]

In Decision 260/PUU-XXIV/2026 a civil servant asked the Constitutional Court to read Pasal 4 huruf e of the ITE Law, the aim of giving users and operators a sense of security, justice and legal certainty, as obliging social media platform operators to ensure that every user acts under a verified real identity. The Court found that the reasoning of the petition and the relief sought did not correspond, and on 30 July 2026 declared the petition unclear and inadmissible without reviewing the provision on its substance.[16][8:1]

One Data Indonesia

Peraturan Presiden 39/2019 was signed on 12 June 2019 and promulgated on 17 June 2019.[17] It requires data produced under One Data Indonesia to meet data standards, to carry metadata, to follow the rules of data interoperability, and to use reference codes and/or master data.[18] It separates the data producer (produsen data), the unit that generates data, from the data custodian (walidata), the unit in a central or regional agency that collects, checks and manages the data producers submit and disseminates them.[5:1]

The same division of roles appears in sectoral data. Undang-Undang 4/2011 defines thematic geospatial information as geospatial information depicting one or more particular themes, made with reference to basic geospatial information, and requires it to refer to that basic information.[19][20] Peraturan Menteri Kehutanan 2/2026, in force from 27 January 2026, divides the Ministry of Forestry's thematic geospatial work between data producers and a single geospatial data custodian, the unit responsible for forest resource inventory and monitoring, which checks, secures and distributes the information through the ministry's geospatial network; the regulation also belongs to forestry and land use regulation in Indonesia.[21][22]

One Data Indonesia also reaches regional government. In August 2026 the City of Semarang issued a mayoral regulation on regional one data (Satu Data Pemerintahan Daerah), which the text held in the CRPG regulation vault heads as Peraturan Wali Kota Semarang Nomor 34 Tahun 2026. It defines regional one data as the data-governance policy of the regional government that forms part of One Data Indonesia and of the home affairs one-data policy, cites Peraturan Presiden 39/2019 among its legal bases, and assigns the work to a chain of roles, from data producers in each regional agency, which must pass open, restricted and closed data to the city data custodian, to a regional one-data forum.[23][24][25] It replaced a 2021 mayoral regulation on One Data Indonesia at city level.[26] CRPG's regulatory tracker analysed the regulation in September 2026.[27]

Institutions and digital government

Peraturan Presiden 1/2025 amended the organic regulation of Statistics Indonesia (Badan Pusat Statistik, BPS), the government body responsible for official statistics. It redefined BPS as a government institution under and responsible to the President and added a Deputy Head to its structure.[28][29]

Peraturan Presiden 83/2025 established the Committee for the Acceleration of Government Digital Transformation, known in short as the Government Digital Committee, a non-structural body answerable to the President that coordinates, synchronises and makes recommendations on the priority agenda for transforming government digital services. It is chaired by the Special Adviser to the President on Digitalisation and Government Technology, with the ministers responsible for the state apparatus and for communication and information as vice-chairs.[30][31] The committee's place in the machinery of government is described at public administration in Indonesia.

Peraturan Presiden 94/2025 established an integrated digital service for mineral and coal commodities, linking the licensing, production, sales, payment, export and shipping processes of eight ministries through the Ministry of Finance unit that manages the Indonesia National Single Window. It requires the service to follow the rules on electronic-based government systems and on One Data Indonesia, and to cover the integration of business processes and information systems, data interoperability and system security.[32][33] The service is also part of mining and energy regulation in Indonesia.

See also

Part of a series on Data governance in Indonesia
Permenhut 2/2026 · PP 17/2025 · Perpres 1/2025 · Perpres 83/2025
Identifiers Know ID K18
Categories Data governance in Indonesia
What links here (17)

References

  1. [P] Undang-Undang Nomor 27 Tahun 2022 tentang Pelindungan Data Pribadi, closing formula (Disahkan di Jakarta pada tanggal 17 Oktober 2022; Diundangkan di Jakarta pada tanggal 17 Oktober 2022; Lembaran Negara 2022 No. 196). regulation_id UU_27_2022. ↩︎ ↩︎

  2. [P] Undang-Undang Nomor 11 Tahun 2008 tentang Informasi dan Transaksi Elektronik, closing formula (signed and promulgated in Jakarta on 21 April 2008; Lembaran Negara 2008 No. 58). regulation_id UU_11_2008. ↩︎ ↩︎

  3. [P] Undang-Undang Nomor 1 Tahun 2024 tentang Perubahan Kedua atas Undang-Undang Nomor 11 Tahun 2008 tentang Informasi dan Transaksi Elektronik, Pasal I angka 5 (inserting Pasal 16A and Pasal 16B) and closing formula (Disahkan di Jakarta pada tanggal 2 Januari 2024; Diundangkan di Jakarta pada tanggal 2 Januari 2024; Lembaran Negara 2024 No. 1). regulation_id UU_1_2024. ↩︎ ↩︎ ↩︎

  4. [P] Undang-Undang Nomor 4 Tahun 2011 tentang Informasi Geospasial, closing formula (signed and promulgated in Jakarta on 21 April 2011). regulation_id UU_4_2011. ↩︎

  5. [P] Perpres 39/2019, Pasal 1 angka 1 (Satu Data Indonesia) and the definitions of Produsen Data and Walidata. regulation_id PERPRES_39_2019. ↩︎ ↩︎

  6. [P] UU 27/2022, Pasal 1 angka 1 (Data Pribadi) and the definition of Pengendali Data Pribadi. regulation_id UU_27_2022. ↩︎ ↩︎

  7. [P] UU 27/2022, Pasal 58 ayat (1) to (4). regulation_id UU_27_2022. ↩︎ ↩︎

  8. [P] Putusan MK Nomor 260/PUU-XXIV/2026, Amar Putusan: "Menyatakan permohonan Pemohon tidak dapat diterima"; pronounced 30 July 2026. Constitutional Court database record, case 260/PUU-XXIV/2026. https://s.mkri.id/public/content/persidangan/putusan/putusan_mkri_14729_1785396252.pdf ↩︎ ↩︎

  9. [P] UU 27/2022, Pasal 4 ayat (1) and (2). regulation_id UU_27_2022. ↩︎

  10. [P] UU 27/2022, Pasal 74. regulation_id UU_27_2022. ↩︎

  11. [P] UU 11/2008, Pasal 4. Original 2008 text. regulation_id UU_11_2008. ↩︎

  12. [P] UU 11/2008, Bab XI (Ketentuan Pidana), beginning at Pasal 45. Original 2008 text. regulation_id UU_11_2008. ↩︎

  13. [P] Peraturan Pemerintah Nomor 17 Tahun 2025 tentang Tata Kelola Penyelenggaraan Sistem Elektronik dalam Pelindungan Anak, Menimbang and Mengingat (implementing Pasal 16A ayat (5) and Pasal 16B ayat (3) of UU 11/2008 as amended by UU 1/2024) and closing formula (Diundangkan di Jakarta pada tanggal 27 Maret 2025; Lembaran Negara 2025 No. 36). regulation_id PP_17_2025. ↩︎

  14. [P] PP 17/2025, Pasal 2 to Pasal 19 (risk assessment, obligations and prohibitions) and Pasal 20 to Pasal 23 (age limits). regulation_id PP_17_2025. ↩︎

  15. [P] PP 17/2025, Pasal 49. regulation_id PP_17_2025. ↩︎

  16. [P] Putusan Mahkamah Konstitusi Nomor 260/PUU-XXIV/2026, paragraph [3.3.4], quoting petitum number 2 and applying Pasal 51A(5)(b)–(c) of the Constitutional Court Law; the petition held "tidak jelas atau kabur (obscuur)". https://s.mkri.id/public/content/persidangan/putusan/putusan_mkri_14729_1785396252.pdf ↩︎

  17. [P] Peraturan Presiden Nomor 39 Tahun 2019 tentang Satu Data Indonesia, closing formula (Ditetapkan di Jakarta pada tanggal 12 Juni 2019; Diundangkan di Jakarta pada tanggal 17 Juni 2019); cited as Lembaran Negara 2019 No. 112 in Peraturan Wali Kota Semarang 34/2026. regulation_id PERPRES_39_2019. ↩︎

  18. [P] Perpres 39/2019, Pasal 3. regulation_id PERPRES_39_2019. ↩︎

  19. [P] UU 4/2011, Pasal 1 (definition of Informasi Geospasial Tematik). regulation_id UU_4_2011. ↩︎

  20. [P] UU 4/2011, Pasal 19. regulation_id UU_4_2011. ↩︎

  21. [P] Peraturan Menteri Kehutanan Nomor 2 Tahun 2026 tentang Penyelenggaraan Informasi Geospasial Tematik Kehutanan, Pasal 39 and closing formula; promulgated 27 January 2026, Berita Negara 2026 No. 63. regulation_id PERMENHUT_2_2026. https://peraturan.go.id/id/permenhut-no-2-tahun-2026 ↩︎

  22. [P] Permenhut 2/2026, Pasal 1 angka 14, Pasal 4, 5 and 6. regulation_id PERMENHUT_2_2026. ↩︎

  23. [P] Peraturan Wali Kota Semarang Nomor 34 Tahun 2026 tentang Satu Data Pemerintahan Daerah, heading, Mengingat (citing Peraturan Presiden 39/2019 and Peraturan Menteri Dalam Negeri 5/2024 on Satu Data Pemerintahan Dalam Negeri), Pasal 59 and closing formula (Ditetapkan di Semarang pada tanggal 26 Agustus 2026; promulgated in Semarang on 26 August 2026; Berita Daerah Kota Semarang 2026 No. 34). Catalogued in the CRPG regulation vault under the mislabelled regulation_id PMK_34_2026; the text itself is the Semarang instrument. ↩︎

  24. [P] Perwali Semarang 34/2026, Pasal 1 angka 1 (Daerah is Kota Semarang) and angka 15 (Satu Data Pemerintahan Daerah). regulation_id PMK_34_2026. ↩︎

  25. [P] Perwali Semarang 34/2026, Pasal 16 (the organisers of regional one data, from the Pembina Satu Data Pemerintahan Daerah to the Forum Satu Data Pemerintahan Daerah) and Pasal 22 (data producers and their duties, including passing open, restricted and closed data to the Walidata Daerah). regulation_id PMK_34_2026. ↩︎

  26. [P] Perwali Semarang 34/2026, Pasal 58, revoking Peraturan Wali Kota Semarang Nomor 25 Tahun 2021 tentang Penyelenggaraan Satu Data Indonesia Tingkat Kota Semarang. regulation_id PMK_34_2026. ↩︎

  27. [E] "Local Government One Data Governance: A Semarang Mayoral Regulation on Satu Data Pemerintahan Daerah", CRPG regulatory tracker, crpg.id, 10 September 2026, corrected 12 September 2026. https://crpg.id/local-government-one-data-governance-pmk-34-2026/ The post carries a notice that it is AI-generated; it is cited for the record of the development, not for its legal content. ↩︎

  28. [P] Peraturan Presiden Nomor 1 Tahun 2025 tentang Perubahan atas Peraturan Presiden Nomor 86 Tahun 2007 tentang Badan Pusat Statistik, Pasal I angka 1, amending Pasal 1 of Perpres 86/2007. regulation_id PERPRES_1_2025. ↩︎

  29. [P] Perpres 1/2025, Pasal I and Pasal II, and closing formula (Ditetapkan di Jakarta pada tanggal 20 Januari 2025; Diundangkan di Jakarta pada tanggal 20 Januari 2025; Lembaran Negara 2025 No. 4). regulation_id PERPRES_1_2025. ↩︎

  30. [P] Peraturan Presiden Nomor 83 Tahun 2025 tentang Komite Percepatan Transformasi Digital Pemerintah, Pasal 1 ayat (1) and (2), Pasal 2 and Pasal 3. regulation_id PERPRES_83_2025. ↩︎

  31. [P] Perpres 83/2025, Pasal 4 ayat (1) to (4). regulation_id PERPRES_83_2025. ↩︎

  32. [P] Peraturan Presiden Nomor 94 Tahun 2025 tentang Layanan Digital Terpadu pada Komoditas Mineral dan Batubara, Pasal 2 ayat (1) and (2) and Pasal 3 ayat (1) and (2). regulation_id PERPRES_94_2025. ↩︎

  33. [P] Perpres 94/2025, Pasal 5 ayat (1) to (3). regulation_id PERPRES_94_2025. ↩︎