Many were shocked by the White House's announcement of the results of trade negotiations between Indonesia and the United States. According to Ardi Sutedja, S.H., MBA., Ph.D., Chairman of the Indonesia Cyber Security Forum (ICSF), the shock is understandable. The public was only aware of the negotiations, which dealt with trade and economic matters. The exchange of personal data of Indonesian citizens was the trigger.

***

On July 22, 2025, the United States announced a trade agreement with Indonesia. Several key points in the agreement included tariff reductions, easing import regulations, eliminating non-tariff barriers, and data transfers.

As the founder of the ICSF, Ardi's primary concern is the exchange of personal data of Indonesian citizens. According to him, this has broadened beyond mere economic or trade issues.

"I see something missing in the trade negotiations between Indonesia and the United States. What we previously considered merely economic matters has changed significantly," he stressed. He added that this exchange of personal data violates the Personal Data Protection Law (UU PDP).

Why did this happen? Another interesting point is the 19:0 score. Indonesian exports are subject to tariffs of up to 19%, while goods from the United States entering Indonesia are completely tax-free. Furthermore, Indonesia must purchase a number of goods, such as aircraft, gas, and so on.

In Ardi Sutedja's opinion, Indonesian negotiators were unprepared for these negotiations. They seemed to have fallen into a White House trap and ultimately signed an agreement that, on the face of it, was seen as more favorable to the Americans.

"Looking at the results, one could draw that conclusion. If you call it reckless, that's not true. But they didn't delve into the environmental aspects and sensitivities involved. It's also possible that our negotiators didn't understand who they were dealing with," he told Edy Suherli, Bambang Eros, and Irfan Meidianto during a visit to the VOI office in Tanah Abang, Jakarta, on July 28.

In your opinion, what is the urgency and primary motive behind the exchange of personal data as part of a trade deal with the United States? Is this a form of "digital coercion"?

Initially, I saw the trade negotiations between Indonesia and the United States as purely about trade or economics. However, after seeing the announcement from the White House, the agreement turned out to be broader—it now includes data exchange. So the issue has expanded beyond the economic aspect. The United States sees trade agreements with other countries as entry points into the digital realm, including how they can incorporate technological issues. Indonesian public data is being exchanged and will be optimized by the United States.

We recall the 2013 scandal involving the political consulting firm Cambridge Analytica, which collected the personal data of millions of Facebook users without permission and then used it for political campaigns, including Donald Trump's campaign in the 2016 presidential election. This case opened our eyes to the extent that personal data can be analyzed using technology and AI—from hobbies to spending patterns and so on. This is something we often don't realize.

So, how do you view this trade agreement between Indonesia and the United States?

If we look at the trade agreements that have been reached, we must view them on a broader scale because they concern the lives of many people. Even more extreme, they concern our sovereignty and national security. So, if we conduct trade negotiations with other countries, we must also consider other aspects, not just the economy. I see something missing in the trade negotiations between Indonesia and the United States. What we initially thought was only an economic matter has actually changed significantly.

Were Indonesian negotiators in the trade negotiations with the United States careless?

I wasn't there, but judging by the results, one could conclude that they were careless. Not really. But they didn't delve into the environmental aspects and sensitivities involved. It's also possible that our negotiators didn't understand who they were dealing with. The basic principle is that if we want to sell something to someone, we need to know who they are and what their preferences are. In negotiations, the same thing applies. Perhaps these aspects were overlooked. Or, perhaps our negotiating team was burdened with impossible targets.

Could it be said that our negotiators have fallen into a White House "trap"?

It could be. The United States desperately wants every negotiation to be in their favor. Anything can happen. This should have been anticipated. This isn't the first time we've faced Donald Trump. It happened in previous terms, and we should have learned from that experience.

After the results of the trade negotiations were announced, who benefited more—Indonesia or the United States?

Don't be too quick to rejoice over Trump's tariff reduction from 23% to 19%. Will this result truly help the Indonesian people, or vice versa? Will there be job creation? Will there be technology transfer? These are all unanswered questions. There are still many things left undiscussed.

In addition to the 19% tariff, Indonesia must also purchase a number of commodities, such as aircraft, gas, and so on, from the United States. How do you view this?

Yes, where will the funds come from to purchase these commodities? Will they want to borrow more?

Does a trade agreement involving the transfer of personal data violate the Personal Data Protection Law No. 27 of 2022?

With cross-border data transfers, the Personal Data Protection Law (PDP) is under significant pressure. This law is already in effect, but its implementing regulations are still lacking. The Personal Data Management Agency mandated by this law has yet to be established. While this agency is still missing, our personal data is already changing hands. This is truly sad.

Some academics say that the exchange of personal data between countries is commonplace. Yes, that's a fact. But since the enactment of the PDP Law, this should no longer occur. According to the law, data is an asset, not a commodity. The state must protect existing data, not hand it over to foreign parties. As a result, this law is a dead end.

The collection of personal data of Indonesian citizens has occurred when people join certain social media platforms. So, has it really been happening for a long time?

In the past, personal data was not considered important by the public. But with the enactment of the PDP Law, it has become crucial to protect it. This is a major challenge the government must overcome: how to convince the public and businesses that their data transferred to the US is truly secure.

This is no easy task, as perceptions have already been formed. The government must involve various competent parties to explain this issue. This is a major gamble for the government—how to ensure that public concerns about their data are not substantiated. In essence, the Personal Data Protection Law is the answer to public concerns. Therefore, the derivative regulations of this Personal Data Protection Law must be a priority for immediate completion.

In your opinion, what are the urgent regulations that need to be regulated in the derivative regulations of this Personal Data Protection Law?

Following the emergence of the trade agreement between Indonesia and the US, the burden on the Personal Data Management Agency (BPDP), as mandated by the PDP Law, has become very heavy. This agency must ensure compliance—because the US, as the data recipient, is subject to the PDP Law.

But how will foreign parties measure compliance? This will make the agency's task even more challenging. Not to mention the oversight and intelligence issues.

Some time ago, the Temporary National Data Center (PDNS) experienced a leak. The issue has now subsided. What are your views on this matter?

A calm situation does not mean the problem is resolved. I'm still waiting for an official explanation from the government—what exactly happened and what concrete steps have been taken to address the PDNS leak.

The PDNS is where ministries and agencies store their data. This means it's a national data vault—storing information ranging from politics, economics, defense, and intelligence. If the data is leaked, it means someone has taken control of our data.

Has the Ministry of Communication and Digital (Komdigi) shown any progress since the PDNS leak?

Hopefully, Komdigi has learned a lot from the PDNS leak and will prevent similar incidents from happening again. Because if all the data has been leaked, what else can we hope for? The dream of a Golden Indonesia could be a distant memory.

Recently, Microsoft's cloud system was breached by a group of hackers suspected of being from China. Is it possible that Indonesian data (both government and private) was also affected?

Many Indonesian companies store their data there because they seek integrated services from reputable providers. But when it comes to hacking, all technology has vulnerabilities. And those vulnerabilities are exploited by hackers.

So, fundamentally, no system is completely secure. Even if there is, it's only a promise. Unless the service provider is willing to provide insurance against the risk.

Do you think it's time for Indonesia to build an independent and secure national cloud? What are the biggest challenges to making it happen?

It's not impossible. I once told the association: don't be discouraged from realizing Indonesia's own cloud. This is a huge opportunity, because the market is there. Not all companies can afford to store their data with reputable companies. Even the small business sector hasn't been widely targeted.

Technologically, Indonesians are already capable of doing this. The proof is that many foreign companies are using Indonesian talent. So, give the nation's youth the opportunity to make a difference.

Besides technological mastery, what else is of concern to you?

What must also be considered is the people. Human resources must have awareness and empathy for security. We must build a digital culture, a risk culture, and a cyber culture itself. There must be simultaneous development between technology and people. That's why there's the term "People, Process, and Technology."

So far, technology has been prioritized. This is a dilemma faced by many developing countries transitioning to developed countries. Which should come first? In fact, all technology must be operated by humans. If the people aren't equipped with the knowledge and skills, the technology won't function properly.

Within the framework of personal data protection, do we need an independent agency?

The basic concept of the Personal Data Management Agency is that it is independent, professional, accommodating, responsible, and passionate. Therefore, we can no longer place ordinary bureaucrats in such an agency.

This agency's task is to create a comfortable environment for the public and industry players. Currently, data protection has become a separate discipline. There are even certification standards for professionals in this field.

What lessons can be learned from the trade negotiations with the United States, which ultimately resulted in the pawning of Indonesian citizens' personal data?

There are many lessons we can learn. One is that we now realize that under complex pressures like this, we must be fully prepared when dealing with a country like the United States.

My parents taught me that we must be intelligent before facing an opponent. We must understand their ecosystem and psychology before entering negotiations. If we are not prepared, we will be dictated to in the process.

Furthermore, we must be sensitive to our surroundings and socialize frequently, making many friends. It's through this network of friends that we can learn many things. These are essential elements that must be prepared if we want to enter the global arena.

The world is changing rapidly today. Moreover, cyberspace is like a jungle—abound with predators and bandits. If we're not prepared, we'll become food for these predators.

Ardi Sutedja's Tips for Enjoying Life

Despite his retirement, Ardi Sutedja—Chairman and Founder of the Indonesia Cyber Security Forum (ICSF)—remains active. In other words, he refuses to sit still and remains committed to enjoying life in a fulfilling way.

During his active service, Ardi had extensive experience in various government agencies, the Indonesian National Armed Forces (TNI), and the Indonesian National Police (Polri). However, in his retirement, his services are still needed by several private companies operating in the technology and cybersecurity sectors.

"I have indeed retired after serving in the government and assisting the TNI and the Police. But the shareholders of the companies I manage have not allowed me to truly retire," he said, urging young people to use technology not only for entertainment, but also as a means of learning and expanding their knowledge.

As a senior figure, Ardi often meets with young people. However, he never hesitates to collaborate, despite the large age gap. "There's no problem mingling with young people. In fact, I can be friends and learn from them," continued the man, who believes there is no age limit to continuous learning.

According to Ardi, technological advancements are currently occurring rapidly. This must be optimally utilized. "It would be a shame not to take advantage of them," said the alumnus of the Faculty of Law, University of Indonesia, and a Master of Business Administration from the State University of New York (SUNY).

Culinary and Exploration of New Places

Culinary is one of Ardi Sutedja's hobbies. He often travels with his wife to cities like Yogyakarta or Bali. Upon arrival, they seek out local cuisine and visit unique tourist attractions.

However, culinary tourism is not without its risks. "The most noticeable impact is increased cholesterol levels. Blood pressure can also sometimes rise," said Ardi, who has his own tips for restoring his body after a culinary adventure.

Ardi doesn't like making schedules when traveling. He's not the type of person who adheres to rigid schedules. He prefers to let travel flow naturally, allowing him to experience unexpected surprises.

"I don't usually use a checklist or itinerary when traveling," said Ardi, who also serves as Chairman of the Honorary Board of the Indonesian Digital Forensics Association (AFDI).

For him, traveling with overly detailed plans can feel tedious. "The important thing is knowing the destination. Once there, just explore. I find that more fun," he said.

There Are Still Many Areas That Have Not Been Visited

Ardi Sutedja didn't set his sights on overseas exploration, but was more interested in exploring Indonesia. "Honestly, I was born and raised in Jakarta. It turns out there are still many areas in Indonesia I haven't visited. I want to explore as many places as possible," said the man who completed his doctoral program in International Relations from Georgetown University, Washington, D.C.

After further investigation, Ardi realized that Indonesia has many interesting destinations worthy of tourism. "So, you don't need to go abroad for a vacation. There are many exciting places to visit within the country," he said.

To reach these tourist destinations, Ardi prefers to take the train or bus. "Our transportation is now excellent. There are buses and trains with reclining seats, almost like first class on an airplane. I enjoy that with my wife," he continued.

>

One of his most interesting experiences was visiting the Ullen Sentalu Museum in Kaliurang, Sleman, Yogyakarta. "In the museum, I read that on January 25, 1937, we were already using streaming. At that time, Queen Juliana married Prince Bernard, and Mangkunegara VII sent Gusti Nurul to dance. The music was transmitted via radio. That was streaming," explained Ardi Sutedja.

"So, when we conduct trade negotiations with other countries, we must consider other aspects, not just the economy. I see something missing in the trade negotiations between Indonesia and the United States. What we initially considered a purely economic matter has actually evolved considerably."