Article 37 Indonesian Data Protection Law 2020
Retention period of personal data
(1) The personal Data controller is required to process theprocessing of personal data if:
a. has reached the retention period;
b. The purpose of processing personal Data has been achieved; Or
c. Request from the personal Data owner.
(2) Termination of the processing of personal Data as intended in paragraph (1) shall be done in accordance with the provisions of the rules of abuse.