Indonesia: Issued ruling in case regarding constitutionality of Articles 1(4), 2(2) and 19 of the Personal Data Protection Law (No. 108/PUU-XX/2022)

On 14 April 2023, the Constitutional Court of Indonesia issued a ruling in Case No. 108/PUU-XX/2022 which involved a petition for judicial review of Articles 1(4), 2(2) and 19 of the Personal Data Protection Law. The articles in question contain the definition of data controllers, the exception for household and personal processing activities, and the types of controllers and processors, respectively. The applicant's contention was that these provisions could effectively exempt legal entities and small-scale e-commerce businesses from the Bill's data protection obligations. The Court dismissed the claim and clarified the scope of the respective provisions.