The Government of Indonesia has issued Government Regulation No. 33 of 2026 (“GR 33/2026”), which serves as the implementing regulation of Law No. 27 of 2022 on Personal Data Protection (“PDP Law”).
Comprising 225 articles, GR 33/2026 provides more detailed guidance on the implementation of the PDP Law and introduces several important provisions for both public and private sector organizations. The issuance of GR 33/2026 marks an important development in Indonesia’s personal data protection framework, providing greater clarity on the rights and obligations of the data controllers and processors, and further strengthening the regulatory framework for the processing of personal data in Indonesia.
Key Highlight: Six-Month Transition Period
GR 33/2026 provides a six-month transition period for the public and private sectors to comply with its provisions. The transition period commenced on 16 July 2026, the date GR 33/2026 was enacted. This transition period provides organizations with time to review and align their personal data protection practices, policies, and compliance frameworks with the requirements under GR 33/2026.
Contact us for more information about GR 33/2026 and data protection regulations in Indonesia.
Email: office@altaadvocates.com