TheJakartaPost
Please Update your browser
Your browser is out of date, and may not be compatible with our website. A list of the most popular web browsers can be found below.
Just click on the icons to get to the download page.
Data protection bill threatens firms with ‘exorbitant’ fines
Change text size
Gift Premium Articles
to Anyone
Share the best of The Jakarta Post with friends, family, or colleagues. As a subscriber, you can gift 3 to 5 articles each month that anyone can read—no subscription needed!
An almost empty plenary room of the House of Representatives is seen in this undated photo. (Antara/Akbar Nugroho Gumay)
P
lanned regulations aimed at strengthening data protection in Indonesia pose a significant threat to companies found to be noncompliant.
The private data protection (PDP) bill, which is currently awaiting its final approval at the House of Representatives, stipulates fines of up to 2 percent of annual revenue for organizations guilty of exposing private information.
“I need to remind data controllers and processors to enforce proper encrypted security that can withstand cyberattacks, remembering that, if any violation happens, the fines will be quite high for corporations. They are exorbitant,” Communications and Information Minister Johnny G. Plate said on Wednesday.
Administrative sanctions and criminal punishment will compel data controllers and processors to establish whole new data management systems to protect users’ private details, a policy deemed novel in a country that has seen several major data breaches over the past few years.
The ministry maintains that the fine of up to 2 percent of revenue is relatively forgiving, given that the European Union’s General Data Protection Regulation (EU GDPR) can entail fines of as much as 4 percent of a company’s global annual revenue.
“In the past, data breaches just slipped through the cracks. Once this law is passed, that won’t happen [any more], because it will be clear who is to be held accountable, up until what point and whether there will be criminal [proceedings] or administrative sanctions,” said Abdul Kharis Alamsyhari, deputy chairman of House Commission I, which oversees intelligence and information.
Read also: PLN, Indihome suspected data breaches underline urgency of PDP bill
