Government Hopes PDP Supervisory Agency Completes Before Finalization Of US Data Transfer Agreement

Deputy Minister of Communication and Trade Nezar Patria (photo: Dinda Buana/VOI)

JAKARTA - The Indonesian government is targeting the process of establishing a Personal Data Protection Act (UU PDP) Supervisory Agency to be completed in August.

Deputy Minister of Communication and Digital Affairs, Nezar Patria, said that currently the process of forming a PDP institution is still in the process of being finalized, and is still discussing it, because there are many articles in the derivative regulations of the PDP Law.

"The PDP agency is being harmonized, yes, it will continue to be discussed because there are more, more than 200 articles. So we have to look at them one by one and the articles and we hope that they can be completed soon, we are targeting that at least August can be completed," said Nezar on Monday, July 28 in Jakarta.

Nezar also hopes that the formation of the PDP Institution can be completed before the finalization of the cross-border data transfer agreement between Indonesia and the United States.

"Yes, if it can be like this (before the finalization), so we can speed up the process so that the clarity we ask for, we can give it," said Nezar to the media crew.

Urgency The Presence Of PDP Supervisory Institutions

On the other hand, cybersecurity expert and Chairman & Founder, Indonesia Cyber Security Forum (ICSF) Ardi Sutedja emphasized that, with the clause of this cross-border data transfer agreement, it is not only the PDP Supervisory Agency that needs to be considered, but also its duties.

"So, we are not only pursuing the institution now, the function of the institution must also be increased, if indeed this agreement has been agreed upon, it means that there must be functions of supervision, audit, surveillance, and intelligence from the institution," Ardi told VOI some time ago.

According to Ardi, the PDP Supervisory Agency must have the ability to ensure that the data shared can be used properly.

"Well, I think about it in formulating the institutions that will be formed. Don't take too long, and there must be some kind of oversight, govern governance, manage risks, and of course compliance," he said.