Data Protection in Indonesia – Security Requirements

An electronic system provider (ESP) in Indonesia must maintain the correctness, validity, confidentiality, accuracy, relevance and compatibility with the purpose of the acquisition, collection, processing, analysis, retention, display, publication, transmission, dissemination and destruction of personal data. Additionally, an ESP must also carry out certification of its electronic system to ensure it is in accordance with the applicable laws and regulations.  https://www.lexology.com/library/document.ashx?g=2714a9b8-a0cf-4b7e-bca8-c47918d9f415