Article 36 Indonesian Data Protection Law 2020
Processing in accordance with approved purposes
The personal Data controller is required to process personal data in accordance with the purposes of processing personal Data approved by the personal Data owner.