October 2026

Government Regulation No. 33 of 2026 (“GR 33/2026”), the implementing regulation for Law No. 27 of 2022 on Personal Data Protection (“PDP Law”), was recently made accessible to the public. Having a promulgation date of 16 July 2026, it is expected to take effect on 16 January 2027. GR 33/2026 provides substantially more detail on how personal data should be collected, used, protected and shared, although several procedures will remain subject to further interpretation, evolving practice, and regulations to be issued by the future Personal Data Protection Authority (“PDP Authority”).

Download full alert