Indonesia: Implemented Regulation 20/2016 Regarding the Protection of Personal Data in an Electronic System including data protection regulation

On 1 December 2016, Indonesian Regulation 20/2016 Regarding the Protection of Personal Data in an Electronic System, which includes data protection regulation, was officially promulgated and thereby implemented. The Regulation implements parts of Government Regulation 82/2012. Regulation 20/2016 sets out a number of definitions in relation to data protection, and stipulates a number of principles and obligations for the processing of personal data. Notably, processing and analysis of personal data requires the approval of the data subject.