Resources · Blog · Tag

UU PDP.

Indonesia's personal data protection law, and what compliance requires.

Tagged “UU PDP”

Blog31 Jul 2026

OJK Cyber Resilience Rules for Digital Banks in Indonesia 2026

Indonesia now has 17 licensed digital banks, more than any other country in Southeast Asia. Digital banking penetration has grown alongside them, from 31% of the population in 2022 to a projected 39%, roughly 75 million people, by 2026. Operating a digital bank Indonesia service places an institution.

Francesco Catozzo

Blog27 Jul 2026

What Is a Cybersecurity Audit? Types, Process, and Checklist

Most breaches don’t announce themselves. They start quietly, in a system nobody checked: an open port left over from a migration, a contractor account that was never disabled, a backup that hasn’t been tested since it was set up. A cybersecurity audit is how you find these before someone

Francesco Catozzo

Blog15 Jul 2026

ISO/IEC 27701 Privacy Information Management System (PIMS)

Most of the guidance you will find on privacy information management systems is out of date. It tells you that a PIMS is an extension of ISO 27001, and that you need an ISO 27001 certificate before you can certify one. Several certification bodies still publish this on their websites today. It stopp

Francesco Catozzo

Third-Party Risk Management Under Singapore's Cybersecurity Act

Blog23 Jun 2026

A Guide to Hybrid Cloud and the US-Indonesia Data Deal

In February 2026, Indonesia and the United States signed a landmark trade agreement that quietly shifted how Indonesian companies move data across borders. For any business running part of its systems in the cloud, maintaining robust cloud security matters more than it first appears. The agreement s

Zentara Team

Blog22 Jun 2026

Indonesia’s Data Protection Authority and the Move to Active UU PDP Enforcement

Indonesia’s data protection law, called UU PDP (Law No. 27 of 2022), has been active since October 2024. Companies can already be penalised for breaking it. What is changing now in 2026 is who enforces it: the government is setting up a dedicated agency to check whether businesses follow the r

Zentara Team

Data Breach Response: A Guide for Businesses

Blog18 Jun 2026

The 72-Hour Rule in UU PDP: A Guide for Fintech & E-Commerce

A customer opens your app, taps a button, and asks you to delete everything you hold about them. From that moment, the clock starts. Under Indonesia’s data protection law, you have 72 hours to act. For a fintech platform or an online store handling thousands of these requests, doing it by hand

Francesco Catozzo

Blog04 May 2026

PDP Law 2026: Indonesia Compliance Audit Checklist

Indonesia’s Personal Data Protection Law, UU No. 27 of 2022, known as the UU PDP, became fully enforceable on 16 October 2024. That deadline passed, yet organisations still running on legacy data practices are now exposed. Conducting a thorough Indonesia PDP law compliance audit is now a tacti

Zentara Team

26 Feb 2026

Indonesia PDPD, PDPA, GDPR: A Practical Compliance Map for Regional Enterprises

For regional enterprises operating across Southeast Asia and beyond, regional data protection compliance has become increasingly complex. Organisations are no longer dealing with a single regulation in a single jurisdiction. Instead, they must navigate Indonesia’s Personal Data Protection Law, vario

Zentara Team