Jakarta, INTI - The Indonesian government is prioritizing information security and the protection of citizens’ personal data in implementing the One Data Indonesia Law (UU SDI). The initiative includes strengthening digital security infrastructure, improving data governance oversight, and enhancing inter-agency cooperation.

Minister of Communication and Digital Affairs Meutya Hafid emphasized that data security remains a key government priority to ensure that information managed through electronic systems is handled securely and responsibly.

She made the statement during the One Data Indonesia Law socialization event at the Ministry of National Development Planning/National Development Planning Agency (Bappenas) office in Jakarta on Thursday, November 5, 2026.

“Strengthening information security is one of our top priorities at the Ministry of Communication and Digital Affairs in supporting the implementation of the One Data Indonesia Law,” Meutya said.

Komdigi Strengthens Cryptographic Infrastructure and Cybersecurity

The Ministry of Communication and Digital Affairs (Komdigi) is preparing several measures to reinforce information security systems and protect government-managed data against various digital threats.

One of its key priorities is strengthening cryptographic infrastructure to safeguard the confidentiality and security of information within government electronic systems.

In addition, Komdigi is encouraging the adoption of digital certificates to improve the security, reliability, and validity of electronic data management processes.

These measures aim to ensure that government information systems have adequate protection mechanisms to address potential disruptions and cybersecurity threats.

Komdigi is also working with the National Cyber and Crypto Agency (BSSN) to improve information security readiness in support of the One Data Indonesia Law.

The collaboration includes conducting security audits to assess the readiness and reliability of electronic systems used to manage government data.

Beyond audits, Komdigi and BSSN are coordinating efforts to address cybersecurity incidents that could potentially disrupt government information systems.

“All of these efforts must be supported by proven security systems,” Meutya stated.

Government Strengthens Oversight of Data Storage and Processing Locations

Meutya explained that data has become an increasingly valuable resource, making clear oversight and control essential to its management.

The government is working to ensure that all data utilization and processing activities operate under appropriate supervisory mechanisms and comply with applicable regulations.

These efforts are intended to safeguard national data sovereignty while upholding every citizen’s right to privacy.

One of the government's key concerns is ensuring transparency regarding the physical locations where data used by various electronic systems is stored.

Clear information about data storage locations is necessary to ensure that information management complies with applicable legal requirements.

Beyond storage locations, the government is also monitoring data processing jurisdictions to establish clarity regarding the authority and control over managed information.

Oversight of these aspects forms part of Indonesia's broader efforts to strengthen data sovereignty and protect citizens' information security.

One Data Indonesia Law Implementation Must Align with Personal Data Protection Regulations

Meutya stressed that the implementation of the One Data Indonesia Law must remain aligned with Indonesia's existing legal framework.

Relevant regulations include the Electronic Information and Transactions Law (UU ITE) and the Personal Data Protection Law (UU PDP).

This regulatory alignment is essential to ensure that One Data Indonesia policies comply with requirements concerning electronic system operations, information security, and citizens' privacy protection.

Meutya also highlighted the importance of clearly defining responsibilities among government institutions involved in implementing national data management policies.

Each institution must understand its respective roles, authority, and responsibilities to ensure coordinated implementation of the law.

Clear divisions of responsibility are also necessary to prevent overlapping authority in the management and utilization of government data.

The government is encouraging all institutions to translate the provisions of the One Data Indonesia Law into concrete policies and actions that can be implemented across government operations.

“We encourage all institutions to translate the mandate of the One Data Indonesia Law into concrete actions. The success of this law will ultimately be measured by the tangible benefits it delivers to the public,” she said.

Government Agencies Must Understand Data Access Rights and Responsibilities

Meutya emphasized that every institution operating an electronic system must understand the limitations of its access rights to the data under its management.

This understanding is essential to ensure that information access is granted and exercised in accordance with established authority.

In addition to access rights, electronic system operators must understand the intended purposes of data usage to ensure that information is processed in accordance with operational needs and applicable regulations.

Government institutions must also clearly understand the respective responsibilities and authorities of parties acting as data controllers and data processors.

Establishing clear divisions of responsibility is an important step toward building secure, transparent, and accountable government data governance.

According to Meutya, the success of the One Data Indonesia Law should not be measured solely by regulatory compliance but also by the tangible benefits experienced by the public.

Through stronger cryptographic infrastructure, digital certificate adoption, collaboration with BSSN, and improved data governance oversight, the government aims to strengthen the security of Indonesia's national information systems.

Regulatory alignment and clearly defined responsibilities among government institutions are also expected to ensure that the implementation of the One Data Indonesia Law continues to prioritize national data sovereignty and the protection of every Indonesian citizen's privacy.

Conclusion 

Indonesia is strengthening its national data security framework through enhanced cybersecurity infrastructure, stricter data governance, and inter-agency collaboration. The initiative aims to protect citizens’ personal information while ensuring secure and responsible implementation of the One Data Indonesia Law.

Read more: Minister Meutya Hafid Calls for U.S. Digital Investments to Deliver Tangible Benefits for Indonesia