Article 49 Indonesian Data Protection Law 2020

Conditions for transfers of personal data outside the Republic of Indonesia

(1) The personal Data controller may transfer personal data to the personal data controller outside the jurisdiction of the unitary State of the Republic of Indonesia in the event of:
a. The country where the personal data controller or international organization that receives the transfer of personal Data has a level of personal Data protection equivalent to or higher than that stipulated in this law;
b. There are inter-state interna agreements;
c. There is a contract between the personal Data controller which has the standard and/or guaranteed personal data protection in accordance with those governed by this law; and/or
d. Personal Data Owner’s consent.
(2) The above provisionsof the transfer of personal Data as intended in paragraph (1) shall be governed by the Government regulation.