On 24 January 2020, the Personal Data Protection (PDP) Law is introduced in the Indonesian House of Representatives. The Bill states that data controllers have to conduct impact assessments to identify risks in processing personal data. Furthermore,…