Article 27 Indonesian Data Protection Law 2020
Data controllers and data processors includeProtect and ensure security of personal data
The personal Data Controller is obliged to protect and ensure the security of the personal data in process, by doing:
a. The preparation and implementation of operational technical measures to protect the personal Data from the interruption of personal Data processing as opposed to the provisions of the legislation; Dan
b. Determinationof personal security level by observing the nature and risks of personal data that must be protected in the processing of personal data.