Article 42 Indonesian Data Protection Law 2020

Personal data control obligations do not apply in case of

(1) Personal Data control obligations as intended in article 32, article 34, article 37, article 38 paragraph (1) letter A, letter B, and letter C, article 39 paragraph (1) Letter C, and article 40 paragraph (1) letter A, do not apply to:
a. National defense and security interests;
b. The law enforcement process;
c. General strip in the framework of the state organizing;
d. The supervision of the financial services sector, monetary, payment system, and financial system stability; Or
e. Aggregate data is aimed at the importance of statistics and scientific research in theframework of the State administration.
(2) The exceptions referred to in paragraph (1) shall be executed only in the course of implementing the provisions of the law.