Indonesia: Entry into force with grace period Personal Data Protection Bill outlining cybersecurity requirements
Description
Entry into force with grace period Personal Data Protection Bill outlining cybersecurity requirements
On 17 October 2022, the Bill on the Protection of Personal Data entered into force, with a grace period of two years on compliance. The Bill states that data controllers have to conduct impact assessments to identify risks in processing personal dat…
Scope
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
legislature
Government Body
parliament
Complete timeline of this policy change
Hide details
2020-01-24
under deliberation
2022-09-20
adopted
2022-10-17
in grace period