PERMIKOMNAS urges the Government and the House of Representatives (DPR-RI) to immediately ratify the Personal Data Protection Bill (RUU PDP).
Makassar, August 21, 2025 — Personal data breaches are not new in Indonesia. In recent months, millions of citizens’ data—including identity information, financial records, and medical histories—have been leaked and traded on dark web forums. These recurring incidents show that Indonesia’s data protection and cybersecurity systems remain extremely weak.
Data breaches continue to happen repeatedly. Most leaks occur within government institutions, and the government appears not to have learned from past incidents by improving its cybersecurity. This negligence has left the public as victims.
The National Association of Informatics and Computer Students (PERMIKOMNAS) is deeply concerned about citizens’ privacy rights and digital security. Therefore, we urge the government and the House of Representatives (DPR-RI) to take concrete steps to protect citizens’ personal data.
Our demands:
Immediately ratify the Personal Data Protection Bill (RUU PDP) as the main legal framework for personal data protection in Indonesia.
Establish an independent Personal Data Protection Authority (LPDP) with the authority and capacity to supervise and enforce data protection regulations.
Strengthen national cybersecurity infrastructure and policies, including regular audits of digital systems in both public and private institutions.
Data breaches are not merely technical issues; they touch on human rights, public trust in the government and the digital sector, and pose threats to social and economic stability. Therefore, personal data protection must be a top priority in developing Indonesia’s digital ecosystem.
Thus, we call on:
The President of the Republic of Indonesia to push for the swift discussion and ratification of the PDP Bill without delay.
The House of Representatives (DPR-RI) to place the PDP Bill as a top priority in the national legislative agenda.
The government to immediately prepare a roadmap for the establishment of the LPDP and strengthen inter-agency collaboration in mitigating data breach incidents.
It is time for Indonesia to build a digital ecosystem that is safe, transparent, and centered on its people.
Privacy is a right, not a commodity.
