AI Governance Institute
EmergingPendingIndonesiaUnacceptable riskHigh risk

Indonesia Draft Presidential Regulations on the National AI Roadmap 2026-2029 and AI Ethics

Issued by

Government of Indonesia (Ministry of Communication and Digital Affairs, Komdigi)

liveID-AI-RoadUpdated October 2026 · Last verified October 1, 2026

Indonesia is preparing two Presidential Regulations: one on a National AI Roadmap for 2026 to 2029, and one on AI Ethics. Both finished inter-ministry harmonisation in 2026 and await the President's signature. The ethics regulation uses three risk tiers but sets no sanctions of its own.

Applies To

Large enterpriseSMBPublic sectorAI developerAI deployer

Overview

Indonesia's Ministry of Communication and Digital Affairs (Komdigi) is preparing two separate Presidential Regulations. One sets a National AI Roadmap for 2026 to 2029, and the other sets AI Ethics rules. Komdigi consulted publicly on draft versions in August 2025. Officials said the drafts were completed in October 2025. By April 2026 both had finished legal harmonisation and were with the Ministry of State Secretariat, awaiting the President's signature. The draft ethics regulation takes a risk-based approach with three categories: unacceptable, high, and low risk. High risk covers uses such as processing sensitive personal data or significantly affecting essential public services. The roadmap sets priority sectors, including finance, health, education, food security, and defence. Officials have said the regulations will carry no sanctions of their own. Enforcement would rely on existing laws such as the Electronic Information and Transactions Law and the Personal Data Protection Law.

Key Requirements

  • •Two separate draft Presidential Regulations: a National AI Roadmap 2026-2029 and AI Ethics.
  • •Both finished harmonisation and await the President's signature at the State Secretariat.
  • •The ethics regulation sorts AI into unacceptable, high, and low risk, with mitigation duties.
  • •Neither regulation sets its own sanctions; existing laws such as the ITE and PDP laws apply.
  • •Organisations should map AI uses in Indonesia against the three risk tiers.

What Your Organization Must Do

  • →Inventory AI systems used or offered in Indonesia, noting purpose, data, and affected users.
  • →Map each use against the draft tiers of unacceptable, high, and low risk.
  • →Flag uses that process sensitive personal data or affect essential public services.
  • →Check current compliance with the Electronic Information and Transactions Law and the Personal Data Protection Law.
  • →Track the Ministry of State Secretariat for the President's signature and the published text.
  • →Brief leadership that the drafts carry no sanctions of their own today.

Playbook Guidance

Step-by-step implementation guidance for compliance teams.

Frequently Asked Questions

Does Indonesia's forthcoming Presidential Regulation on AI Ethics apply to foreign companies with Indonesian users?
Based on signaled provisions, the regulation would apply to enterprises whose AI systems affect Indonesian residents or markets, regardless of where the company is headquartered. Foreign operators with significant Indonesian user bases should treat this as a likely compliance obligation and begin readiness assessments now.
What is the current status and expected effective date of Indonesia's Presidential Regulation on the National AI Roadmap?
Both drafts finished inter-ministry harmonisation and were with the Ministry of State Secretariat by April 2026, awaiting the President's signature. No effective date has been published.
What AI risk assessment requirements are anticipated under Indonesia's Presidential Regulation?
The draft ethics regulation takes a risk-based approach, with mitigation duties for higher-risk uses. Detailed assessment methods will only be clear once the text is signed and published.
What penalties or enforcement mechanisms will apply under Indonesia's AI Ethics Presidential Regulation?
Komdigi officials say the regulations will carry no sanctions of their own. Enforcement will rely on existing laws such as the ITE Law and the Personal Data Protection Law.
How does Indonesia's anticipated AI Ethics regulation compare to the EU AI Act for multinational compliance programs?
Like the EU AI Act, the draft ethics regulation uses risk tiers: unacceptable, high, and low. Unlike the EU Act, it sets no penalties of its own.
Should SMBs operating in Indonesia begin compliance preparations before the Presidential Regulation is finalized?
Yes, early preparation is advisable given that the regulation is expected to apply broadly across enterprise sizes and sectors. SMBs should inventory their AI systems targeting Indonesian users, engage regional counsel, and draft adaptable ethics review procedures that can be activated without significant lead time once the regulation is confirmed.