Article 27 Indonesian Data Protection Law 2020

Data controllers and data processors includeProtect and ensure security of personal data

The personal Data Controller is obliged to protect and ensure the security of the personal data in process, by doing:
a. The preparation and implementation of operational technical measures to protect the personal Data from the interruption of personal Data processing as opposed to the provisions of the legislation; Dan
b. Determinationof personal security level by observing the nature and risks of personal data that must be protected in the processing of personal data.