Indonesia: Lawsuit challenging constitutionality of cross-border data transfers without public consent or parliamentary approval (Case No. 137/PUU-XXIII/2025)

Progress

Current status
in force
19 Jan 2026 in force
26 Aug 2025 under deliberation

Scope

Implementers
Indonesia
Policy Area
Data governance
Policy Instrument
Cross-border data transfer regulation
Regulated Economic Activity
cross-cutting
Government Branch
judiciary
Government Body
court
Implementation Level
national

Timeline of events

19 Jan 2026
in force

Constitutional Court affirmed constitutionality of Article 56 of Personal Data Protection Law on cross-border data transfers

On 19 January 2026, the Constitutional Court issued a ruling confirming the constitutionality of Article 56 of Personal Data Protection Law over alleged failure to recognise popular sovereignty. The Court rejected all four counts of the petition, ho…

Source
Event type public lawsuit
Action type ruling
Government branch judiciary
Government body court
26 Aug 2025
under deliberation

Lawsuit challenging constitutionality of cross-border data transfers without public consent or parliamentary approval was filed at constitutional court (Case No. 137/PUU-XXIII/2025)

On 26 August 2025, a lawsuit relating to the constitutionality of cross-border data transfers without public consent or parliamentary approval was filed at the Constitutional Court. The appellant challenged Article 56 of the 2022 Personal Data Prote…

Source
Event type public lawsuit
Action type announcement
Government branch judiciary
Government body court