WONE Global's guide to Indonesia records this change under data protection. Each statement below has been checked against the source it links to.
The Personal Data Protection Law allows transfers of personal data outside Indonesia where the destination has equivalent or higher protection, appropriate safeguards are in place, or the data subject consents, and Government Regulation 33 of 2026 sets out how each route works.
Government Regulation 33 of 2026 was promulgated on 16 July 2026. The authority will keep a whitelist of adequate jurisdictions; safeguards include standard contractual clauses (to be issued) and binding corporate rules needing prior approval; consent is a narrow fallback for one-off, limited transfers.
Rajah & Tann Asia · PDP Law Updates: The PDP Implementing Regulation Is Out, and It Clarifies Some Key Questions Under Indonesia's PDP Law ↗ Checked against a secondary source · Not yet professionally reviewed · checked 19 October 2026
This is a summary of the rule as published, not advice on how it applies to you. The WONE Global Partner for this service in Indonesia can advise on that.











