AI Regulation in Indonesia
Indonesia has no AI-specific law in force. Its Ministry of Communication and Digital Affairs (Komdigi) has prepared two Presidential Regulations: a National AI Roadmap for 2026 to 2029, and AI Ethics rules. Both finished inter-ministry harmonisation in 2026 and await the President's signature.
The draft ethics regulation sorts AI uses into unacceptable, high, and low risk, with mitigation duties for higher-risk uses. Officials have said the regulations will carry no sanctions of their own. Enforcement would rely on existing laws such as the Electronic Information and Transactions Law and the Personal Data Protection Law.
For organisations operating in Indonesia today, the Personal Data Protection Law is the main enforceable baseline for AI systems that process personal data. Mapping AI uses against the draft risk tiers is a sensible step while the regulations are finalised.
Key themes
- 1.Two draft Presidential Regulations: National AI Roadmap 2026-2029 and AI Ethics
- 2.Three risk tiers in the draft ethics rules: unacceptable, high, and low
- 3.No sanctions of their own; existing ITE and data protection laws apply
- 4.Personal Data Protection Law as the current compliance baseline
