On 28 October 2022, Case No. 108/PUU-XX/2022 was filed with the Constitutional Court of Indonesia, with a petition for judicial review of Articles 1(4), 2(2) and 19 of the Personal Data Protection Law. The articles in question contain the definition of data controllers, the exception for household and personal processing activities, and the types of controllers and processors, respectively. The applicant's contention was that these provisions could effectively exempt legal entities and small-scale e-commerce businesses from the Bill's data protection obligations.
Original source