Article 17 Indonesian Data Protection Law 2020

Personal Data Processing Inclusions

(1) Personal Data processing includes:

a. Acquisition and collection;

b. Processing and analysing;

c. Storage

d. Fixes and updates;

e. Appearance, announcement, transfer, dissemination, or disclosure; and/or

f. elimination or destruction.

(2) Processing of personal Data as intended in paragraph (1) shall be conducted in accordance with the principles of personal data protection including:The collection of personal Data is done on a limited and specific basis, legally, appropriately, and transparently.

a. Processing of personal Data is done in accordance with its purpose;

b. Personal Data processing is done to ensure the right of the

c. Personal Data;The processing of personal Data is accurate, complete, not misleading, current and accountable;

d. Processing of personal Data is done by protecting the security of personal Data from unauthorized access, unauthorized disclosure, unauthorized alteration, misuse, destruction, and/or loss of personal Data;

e. Personal Data processing isrevealed by notifying the purpose and activities of the processing, as well as the failure of Data protectionPersonal data is destroyed and/or deleted after a retention period expires or upon request by the owner of the personal Data unless otherwise specified by thestatutory regulations;

g. Technical provisions of the processing of personal Data asin paragraph (1) shall be governed by the Minister.

h. The processing of personal Data is carried out responsibly by fulfilling the implementation of the personal Data protection principle and can be clearly demonstrated.