Blog post
January 6, 2026

Indonesia’s PDP law and social listening: what buyers need to know in 2026

Indonesia’s Personal Data Protection Law (Law No. 27/2022) finished its two-year transition period in October 2024. Every organisation that processes personal data in Indonesia is now expected to comply. Yet the landscape remains unusually uncertain: the supervisory PDP Agency has not been established, the implementing regulation is still undergoing harmonisation, and a January 2026 omnibus law on criminal provisions (Law No. 1/2026) revised penalty clauses across multiple statutes, including the PDP Law. For social listening buyers, this creates a compliance environment where the obligations are clear but the enforcement infrastructure — and some of the finer regulatory detail — is still taking shape.

What the PDP law requires

The PDP Law establishes comprehensive data protection requirements modelled on GDPR principles but adapted for Indonesia’s context. Key provisions affecting social listening include purpose limitation (data can only be processed for stated purposes), storage limitation (data cannot be retained beyond the period necessary), data subject rights (including access, correction, and deletion), cross-border transfer requirements, and data breach notification.

The consent framework is thorough. Data controllers must provide clear information about the purpose of processing, the type of personal data collected, and the retention period before obtaining consent. For social listening, this means organisations cannot simply begin monitoring Indonesian social media without establishing a documented legal basis.

A notable feature of the PDP Law is that it does not appear to provide an explicit exemption for publicly available data — a distinction from Singapore’s PDPA, which does include such a carve-out. Many legal commentators have interpreted this to mean that even public posts on platforms like Facebook, TikTok, and X are considered personal data when they can be linked to identifiable individuals, bringing aggregation, analysis, and storage of such data under PDP Law obligations. However, the implementing regulation has not been finalised, and no supervisory authority exists yet to issue authoritative guidance on this point. Organisations should work with local legal counsel to assess how this provision applies to their specific social listening activities, as the regulatory position may become clearer once the PDP Agency is operational.

The absence of the supervisory agency creates practical uncertainty more broadly. Organisations are expected to comply with the law’s requirements, but there is no regulatory body to issue guidance, respond to queries, or enforce compliance. This vacuum has led many organisations to adopt a wait-and-see posture — a strategy that carries real risk when the agency becomes operational and begins reviewing existing data processing practices.

The enforcement horizon

The PDP Agency is expected to become operational in 2026–2027. The draft Presidential Regulation establishing the Agency has gone through multiple harmonisation rounds. Legal experts anticipate the Agency will prioritise establishing its organisational structure, issuing implementing guidelines, and building enforcement capacity before pursuing widespread enforcement actions.

When enforcement begins, the Agency will likely focus initially on high-profile cases involving large-scale data processing, cross-border transfers, and sector-specific complaints. Social listening — which involves processing volumes of personal data from public and semi-public sources — is the type of activity that could attract regulatory attention.

It is worth understanding the penalty structure clearly. The PDP Law sets criminal fines for individuals at up to IDR 4–6 billion depending on the offence, with corporate penalties multiplied by up to ten times the individual amount. The highest corporate criminal fine — IDR 60 billion (approximately USD 3.68 million) — applies specifically to the offence of creating false or fake personal data. Other violations carry lower but still substantial corporate maximums: up to IDR 50 billion for unlawful collection or use of personal data, and up to IDR 40 billion for unlawful disclosure. Administrative fines of up to 2% of annual revenue apply separately. Beyond monetary penalties, courts can order confiscation of profits, suspension of business operations, licence revocation, or even corporate dissolution.

Separately, Law No. 1/2026 — an omnibus law on criminal provisions dated 2 January 2026 — adjusted criminal sanction clauses across several Indonesian statutes, including the PDP Law. This is part of a broader legislative programme on criminal law reform rather than a targeted amendment to data protection specifically, but it reflects ongoing legislative attention to the penalties framework.

For social listening buyers, the compliance imperative is clear: build governance frameworks now, while there is time to implement them properly, rather than scrambling to comply once enforcement begins.

Practical compliance steps for social listening

The compliance approach should address four areas specific to social listening operations. The guidance below reflects Isentia’s interpretation of the current regulatory landscape and should not be treated as legal advice. We strongly recommend engaging qualified Indonesian legal counsel to develop a compliance strategy tailored to your organisation.

  • Document your lawful basis for processing: Given the apparent absence of a publicly available data exemption, many legal practitioners point to legitimate interest as a potentially viable basis — that the organisational benefit of social listening outweighs the potential adverse effect on data subjects. This would require a documented legitimate interest assessment for each monitoring programme. However, as the PDP Agency has not yet issued guidance on how lawful bases should be applied in practice, this approach should be validated with local counsel and revisited as regulatory guidance emerges.
  • Implement retention policies: Social listening platforms that store historical data indefinitely create compliance risk. Define retention periods based on actual analytical needs and configure your platform to enforce them.
  • Establish access controls: Restrict access to social listening data to personnel who have a documented need. Maintain audit trails for data access and use.
  • Prepare for cross-border transfers: If your social listening vendor stores or processes data outside Indonesia, document the transfer arrangements and ensure adequate protection in recipient jurisdictions.

How Isentia supports PDP law readiness

Pulsar Group — Isentia’s parent company — holds ISO/IEC 27001:2022 certification for information security management and ISO 9001 certification for quality management, covering its portfolio of brands including Isentia. These independently audited certifications provide a compliance foundation for buyers who need to demonstrate that their vendors meet recognised international standards for data security and operational quality.

The Pulsar platform offers configurable retention periods, role-based access controls, and audit trails that support the kind of documentation the PDP Law requires. While no platform can guarantee regulatory compliance on its own — compliance is ultimately an organisational responsibility — these capabilities give social listening buyers the technical controls needed to implement a defensible governance framework.

Frequently asked questions

Does Indonesia’s PDP Law exempt publicly available social media data?

The PDP Law does not contain an explicit exemption for publicly available data, unlike Singapore’s PDPA. Most legal commentators interpret this to mean that public social media posts linked to identifiable individuals are considered personal data. The implementing regulation and future PDP Agency guidance may provide further clarity.

When will the PDP Agency begin enforcement?

The PDP Agency is expected to become operational in 2026–2027. The implementing regulation is undergoing harmonisation, and the Agency will need to establish its structure and issue guidelines before widespread enforcement begins.

What are the maximum penalties under the PDP Law?

Corporate criminal fines range from IDR 40 billion to IDR 60 billion depending on the offence, with the highest figure applying to the creation of false personal data. Administrative fines of up to 2% of annual revenue apply separately. Additional sanctions can include asset confiscation, business suspension, and corporate dissolution.


*Disclaimer: This blog is for informational purposes only and does not constitute legal advice. Indonesia’s PDP Law regulatory environment is evolving, and organisations should consult qualified Indonesian legal counsel for guidance specific to their circumstances.

Learn more


If you’re interested in how Isentia can support your brand and strategy, simply fill out the form below and one of our specialists will contact you!


Share

Similar articles

object(WP_Post)#7677 (24) { ["ID"]=> int(48739) ["post_author"]=> string(2) "75" ["post_date"]=> string(19) "2026-07-23 02:33:57" ["post_date_gmt"]=> string(19) "2026-07-23 02:33:57" ["post_content"]=> string(14557) "

The Australian public’s reaction to government reforms and leaders was especially eventful. Debates about campus safety by the Royal Commission, a tax deal between Labor and the Greens unsettling the finance and property sectors, and a speech on “monoculture” by Pauline Hanson shifting opinion polls in an unexpected way; were three complex stories that saw audiences taking different sides, leading to many perspectives and angles.

We used Isentia's Lumina to track the different viewpoints, key people, and stories with the largest volume and audience. Over four weeks (22 June to 17 July), we found 62 unique perspectives and nearly 900 media items across these three stories.

Key Stories, Key Drivers

Here’s a quick overview:

The Royal Commission on campus anti-semitism

The Royal Commission on Antisemitism and Social Cohesion’s hearings on university campuses was the biggest story by far. In less than a week, it drew 33 perspectives and 453 media items, reaching over 628k audiences. The story’s size came from the many institutions involved—student groups, representative bodies, and the federal government—each offering their own view on the same testimony.

Pro-Palestinian advocacy groups had the widest reach, making up about a third of all coverage. Spokespeople like Yasmine Johnson from Students for Palestine and Nasser Mashni from the Australia Palestine Advocacy Network told the commission their campus protests are a legitimate justice movement. They also raised concerns that criticism of government policy is being confused with antisemitism, which they say limits open debate.

Jewish student and staff groups also received significant coverage, making up about a fifth of the total. The Australian Union of Jewish Students described campuses where some students feel hesitant to attend and highlighted gaps in how universities handle complaints and support those affected. Most of this coverage came from wire services and was widely shared across news outlets like The Australian or the Midwest Times.

The federal government provided a third perspective, with similar coverage. Education Minister Jason Clare said universities had been slow to act and announced plans to tighten governance standards. This includes clearer anti-racism policies covering both antisemitism and Islamophobia. Reports also noted that TEQSA, the regulator, warned universities about outside groups joining campus protests, and the government’s antisemitism envoy suggested universities could face funding cuts if they do not do enough.

The Labor-Greens Tax Deal

The second-biggest story was more focused but still managed to stir strong reactions. Labor’s deal with the Greens to close a borrowing loophole for self-managed super funds, in return for Greens support on capital gains tax and negative gearing changes, led to 22 perspectives and 232 media items, reaching nearly 177k audiences.

The government, supported by the Greens, presented the deal simply — it closed a loophole that allowed wealthy investors to use their super funds to compete with first-home buyers at auctions. Treasurer Jim Chalmers cited a 2014 recommendation to support the change, and Greens treasury spokesman Nick McKim called it a win against "wealthy property investors."

The Greens, however, took a tougher stance and received similar coverage for saying the deal was only a partial win. They argued that allowing existing arrangements to continue would let Labour protect wealthy investors rather than renters, and said the housing crisis would now be "squarely of Labor's design." This shows that support from a governing partner does not always mean they are satisfied, as Country News highlighted.

Finance and business groups pushed back with nearly as much coverage. The Self-Managed Super Fund Association and the Australian Finance Industry Association said the borrowing rules did not pose a systemic risk and argued that regulators should focus on "aggressive marketing" and property spruiking, not legitimate investors. The Australian Chamber of Commerce and Industry warned that the wider capital gains tax changes could hurt business investment. ABC News gave the most detailed account of this perspective, noting the sector was "surprised" by how the deal was made.

Pauline Hanson’s monoculture speech

This story had the fewest perspectives (just seven) but still reached nearly 236k people through 210 media items. That’s a bigger audience than the tax story, which had three times as many viewpoints.

The story began when Pauline Hanson used a National Press Club speech to argue that Australia should replace multiculturalism with a single "monoculture." She cited Paul Hogan and the Socceroos as examples. The backlash was quick and unexpected and Hogan himself called her a "pelican" and said her views were racist. His response ended up shaping the story more than her monoculture speech.

What makes this story notable is what happened afterward. Two polls, Newspoll and Redbridge, showed One Nation’s primary vote dropping by about two points (Dairy News Australia) and Hanson’s personal approval falling ten points into negative territory. Labor regained a narrow lead and Labor minister Murray Watt quickly described the numbers as a "reality check,". This framing spread almost as widely as the original speech, as the Bendigo Advertiser reported.

The speech and the poll results are really one story seen from three sides — Hanson’s message, her critics’ reactions, and Labor’s use of the polling. Each angle received similar coverage, showing that the speech missed its mark and gave the government a useful talking point.

How does this inform PR & Comms Strategy?

First, the number of perspectives in a story is important. A story with many viewpoints, like the antisemitism hearings, needs a different monitoring approach than one with just a few, because the loudest voices might not always be the most important.

Second, pay attention when several perspectives are about the same size, as in the tax deal. If no single viewpoint stands out, the issue is likely still being debated. It’s a good idea to check back after some time instead of treating the first coverage as the final answer.

Third, compare any polarising message to the Hanson example before recommending it to a client. The numbers show that a divisive message can get attention but still turn public opinion against the speaker.

Conclusion

What links these stories is how much is lost when they are reduced to just two sides. The antisemitism hearings, the tax deal, and Hanson’s polling drop were all more complex than their main headlines suggested.

That’s why it’s valuable to track a story by its different perspectives and key drivers. See what Lumina can reveal for your industry or clients, and check out more analysis like this on the Isentia blog


" ["post_title"]=> string(61) "Who really shaped Australia's latest social cohesion debates?" ["post_excerpt"]=> string(170) "See how Isentia's Lumina tracked 62 perspectives across 3 major Australian stories, revealing how media coverage really spreads and who ends up controlling the narrative." ["post_status"]=> string(7) "publish" ["comment_status"]=> string(4) "open" ["ping_status"]=> string(4) "open" ["post_password"]=> string(0) "" ["post_name"]=> string(59) "who-really-shaped-australias-latest-social-cohesion-debates" ["to_ping"]=> string(0) "" ["pinged"]=> string(0) "" ["post_modified"]=> string(19) "2026-07-23 02:35:20" ["post_modified_gmt"]=> string(19) "2026-07-23 02:35:20" ["post_content_filtered"]=> string(0) "" ["post_parent"]=> int(0) ["guid"]=> string(32) "https://www.isentia.com/?p=48739" ["menu_order"]=> int(0) ["post_type"]=> string(4) "post" ["post_mime_type"]=> string(0) "" ["comment_count"]=> string(1) "0" ["filter"]=> string(3) "raw" }
Blog
Who really shaped Australia’s latest social cohesion debates?

See how Isentia’s Lumina tracked 62 perspectives across 3 major Australian stories, revealing how media coverage really spreads and who ends up controlling the narrative.

object(WP_Post)#8986 (24) { ["ID"]=> int(47963) ["post_author"]=> string(2) "75" ["post_date"]=> string(19) "2026-06-03 02:01:58" ["post_date_gmt"]=> string(19) "2026-06-03 02:01:58" ["post_content"]=> string(5651) "

There is a new frontier where public perception is shaped: Large Language Models. Right now, LLMs are answering critical questions about your organisation. What are they saying? And more importantly, which sources are shaping those answers?

To navigate this landscape, public relations professionals don't need generic tools, but rather technology that speaks their language, and addresses the realities of a changed media and informational landscape.

That is why we're unveiling Lumina AI View, the latest addition to our intelligent suite of AI tools from Isentia. Trained specifically on the workflows and challenges of modern PR & communications, Lumina AI View helps you understand exactly what AI knows about you, and how it learned it.

A new standard for AI visibility

AI View tracks your citation strength and source quality alongside those of your competitors, giving you a clear view of where you hold authority and where you have gaps.

Lumina AI View maps your AI reputation from the ground up, allowing you to:

  • See which sources matter: When tools such as ChatGPT or Gemini discuss your organisation, which outlets do they cite? Track your source footprint over time and view the impact of key target media on how you’re discussed. We measure your citation strength and source quality alongside those of competitors, giving you a clear view of where you have authority and where you have gaps.
  • Gain industry-specific insight: Your competitors get cited from Financial Times and Bloomberg. You get cited on Reddit. Each brings opportunity – and risk. Discover how you measure up against industry standards, and target the sources that actually influence how AI represents you.
  • Catch narrative shifts early: AI responses change when new sources appear, sentiment shifts, or old controversies resurface. Get alerts when citation patterns change suddenly, before they impact the way you’re perceived by stakeholders.

Measure your progress: From media monitoring to full media intelligence

Lumina AI View is built on the principle that insights get stronger with repeated measurement. To help you maintain a clear view of your reputation, our proprietary scoring system provides regular updates that show you:

  • Evolving trends in how sources cite your organisation
  • Competitive standing and benchmark metrics
  • Where models differ in information presented, and sources cited 

Whether you run it weekly, on-demand, or whenever you need a check-in, patterns will emerge, trends will become clear, and you will build a baseline that makes any sudden narrative changes both comprehensible and the prerequisite to action.

Lumina AI View is part of Lumina AI, a comprehensive suite of AI tools built specifically for communicators. Our Lumina suite evolves traditional media monitoring into narrative intelligence, enabling you to truly understand how perceptions form, evolve, and impact your reputation.


Get in touch to register your interest and see what Lumina AI View can do for you.

" ["post_title"]=> string(66) "Introducing Lumina AI View: AI Visibility Built for PR & Comms" ["post_excerpt"]=> string(158) "Lumina AI View, the latest in Isentia's AI suite, is trained on PR & comms workflows to help you understand what AI knows about you — and how it learned it." ["post_status"]=> string(7) "publish" ["comment_status"]=> string(4) "open" ["ping_status"]=> string(4) "open" ["post_password"]=> string(0) "" ["post_name"]=> string(59) "introducing-lumina-ai-view-ai-visibility-built-for-pr-comms" ["to_ping"]=> string(0) "" ["pinged"]=> string(0) "" ["post_modified"]=> string(19) "2026-07-15 03:12:57" ["post_modified_gmt"]=> string(19) "2026-07-15 03:12:57" ["post_content_filtered"]=> string(0) "" ["post_parent"]=> int(0) ["guid"]=> string(32) "https://www.isentia.com/?p=47963" ["menu_order"]=> int(0) ["post_type"]=> string(4) "post" ["post_mime_type"]=> string(0) "" ["comment_count"]=> string(1) "0" ["filter"]=> string(3) "raw" }
Blog
Introducing Lumina AI View: AI Visibility Built for PR & Comms

Lumina AI View, the latest in Isentia’s AI suite, is trained on PR & comms workflows to help you understand what AI knows about you — and how it learned it.

Ready to get started?

Get in touch or request a demo.