Jakarta, INTI - Indonesia’s Deputy Minister of Communication and Digital Affairs, Nezar Patria, has urged businesses to verify the identity, ownership, and authorization limits of artificial intelligence (AI) agents used in their operations to prevent security risks and the misuse of personal data.
The warning comes amid growing adoption of AI agents by companies to manage customer service, transactions, and various business processes.
Nezar emphasized that businesses should implement the principle of Know Your Agent (KYA), in addition to the established Know Your Customer (KYC) approach.
“It is no longer just KYC, Know Your Customer, but there must also be KYA, Know Your Agent,” Nezar said, as quoted in a press statement received in Jakarta on Friday, October 16, 2026.
Deputy Minister Highlights Risks of Autonomous AI Agents
Nezar explained that technological advances have enabled AI agents to do more than generate information. They can also execute actions based on algorithms and the authorization granted by companies.
These capabilities allow AI agents to interact directly with business systems and process data without requiring human decisions at every stage.
However, their ability to act autonomously also introduces new risks for businesses.
“When machines can make decisions on their own, the risks increase,” Nezar said.
He stressed that companies must clearly understand the identity and ownership of the AI agents they deploy, including the extent to which these systems are permitted to access corporate systems and data.
AI Agents Could Exceed Their Authorized Limits
Nezar warned that autonomous AI agents could potentially execute processes beyond established restrictions.
“Sometimes, agentic AI may bypass certain rules, regulations, or limitations established within a corporation because it can act autonomously,” he said.
He emphasized the importance of preventive measures when companies use AI agents to interact with customers or process transactions.
Nezar also highlighted the possibility of interactions between AI agents operated by companies and those used by external parties.
“In the future, the parties interacting with you may no longer be just people. Other agentic AI systems may also make inquiries or access your systems, or individuals may use their own agentic AI,” he said.
This development makes verifying AI agents’ identities and restricting their authority increasingly important for corporate system management.
Personal Data Protection Must Be Built into System Design
Beyond the risk of violating internal rules, Nezar stressed the importance of protecting personal data when implementing AI technologies.
He explained that data leaks and misuse do not necessarily result solely from weaknesses in system security.
Such risks can also arise when AI systems are granted inappropriate access or excessive authority to process information.
Nezar therefore emphasized the adoption of security by design and privacy by design from the earliest stages of system development.
These principles integrate security and privacy protection into technology development rather than treating them as additional measures introduced after deployment.
“Both principles need to be part of companies’ efforts to ensure that data processing complies with personal data protection requirements,” he said.
Government Invites Business Input on AI Regulations
Nezar said the government remains open to input from businesses regarding emerging challenges associated with artificial intelligence.
Such feedback is needed to better understand the challenges of implementing AI in business operations, particularly in areas involving security, system access, and data protection.
“This input is needed to help identify risks and explore the need for technical regulations as AI continues to evolve,” he said.
The government hopes that continued engagement with businesses will help identify appropriate regulatory requirements as AI agents become increasingly integrated into digital services and transactions.
Conclusion
Indonesia is emphasizing the importance of responsible AI adoption as businesses increasingly rely on autonomous AI agents. Through the Know Your Agent (KYA) principle, companies are encouraged to verify AI identities, limit system access, and integrate security and privacy protections into system design to reduce data breaches and regulatory risks.
Read more: Trade Minister Budi Santoso Encourages MSMEs to Leverage AI to Expand Export Markets at TEI 2026