New data rules could unlock cross-border data flows

Government Regulation 33/2026, signed in July but only recently made public, provides Indonesian businesses with much-needed clarity on data protection and cross-border data transfers. The regulation outlines detailed obligations for businesses collecting or processing personal data, including consent requirements and consumer redress mechanisms.

Crucially, it also establishes a framework for legally transferring Indonesian personal data overseas, recognizing adequacy decisions and binding corporate rules as valid pathways. This long-awaited clarity is expected to remove significant uncertainty for businesses that have navigated a legal gray zone for years, as noted by Danny Kobrata of K&K Associates.

Brief written by urgent.news from The Jakarta Post's own syndicated text. Machine-written — may contain errors; check the original before relying on it.