One Criterion Now Triggers Mandatory DPO: Indonesian Constitutional Court’s Decision Alters PDP Compliance Landscape

The Constitutional Court has expanded the interpretation of Article 53(1)(b) of the Personal Data Protection Law, making the appointment of a Data Protection Officer (DPO) mandatory if any one of the listed criteria is met.

Organisations should promptly review their personal data processing practices to determine whether the revised obligations apply and take the necessary compliance steps.

We invite you to read our most recent insights on the matter at this link