Indonesia: Introduced Personal Data Protection Law including data protection authority governance

On 24 January 2020, the Personal Data Protection (PDP) Law is introduced in the Indonesian House of Representatives. The Bill contains provisions regarding data protection authority governance. It foresees the establishment of a data protection authority which is answerable to the President, and which is responsible for formulating guidelines on data protection, supervising the implementation of the Bill, overseeing administrative enforcement against violations of the Bill, and facilitating relevant dispute resolutions. The authority would have, among other things, the power to formulate relevant policies, receive complaints, carry out investigations, impose sanctions, carry out evaluations regarding cross-border data transfers, and coordinate with other national data protection authorities.