Jakarta. The government is currently drafting the derivative regulations on the personal data protection law, and the document is expected to lay out the details of the administrative fines, among others.

President Joko "Jokowi" Widodo inked the personal data protection law last year. The law states that companies can face an administrative fine of up to 2 percent of their total annual revenue if they fail to comply. However, Indonesia chose to elaborate on the details of a derivative government regulation, which is currently in the works.

“We are almost done drafting the government regulation for personal data protection. As soon as it is finished, we will discuss it among the related ministries and government bodies,” Semuel Abrijani Pangerapan, a senior official at the Communications Ministry, told reporters in Jakarta on Monday.

“We aim to introduce the government regulation to the public in September so we can get some inputs,” Semuel said.

According to Semuel, the violators are only subject to fines in Oct. 2024, namely once the government regulation and the overseeing institution are ready. 

The 2022 personal data protection law also mentioned the establishment of an institution that is in charge of policymaking. This institution will also not only oversee the personal data protection implementation but also impose administrative sanctions. 

“We are also preparing the presidential regulations for this said institution,” Semuel told the press.

“So at present, we only issue warnings and recommendations [in case of violations] so they [the violators] can improve. So the fines only come into force in Oct. 2024. People have two years since the law's enactment to adapt,” Semuel said.

Read More: Indonesia Launches Satria-1 Satellite into Orbit