Indonesia drafting long-pending Cybersecurity Bill, says Minister

Indonesia’s Deputy Minister of Communications and Digital, Nezar Patria, said that the government is currently drafting a Cybersecurity and Cyber Resilience Bill to strengthen the protection of cyberspace and the digital ecosystem. 

"Discussions between the government and various stakeholders regarding the drafting of this bill are ongoing with the main point of putting cybersecurity on top of every digital innovation we produce," said Nezar at the opening of the Cyber Security Trend and Outlook 2025 event organised by Palo Alto Networks in Jakarta on February 27. 

According to Nezar, the Cybersecurity Bill aims to protect national interests from cyber threats. The bill will also regulate the roles and obligations of related entities in ensuring cybersecurity as well as set sanctions for violations, ranging from written warnings to criminal sanctions.    

"In the midst of rapid digital transformation, cybersecurity is something that must be anticipated and prioritised," Nezar continued.

GovInsider previously reported that the Cybersecurity Bill had been proposed by the government in 2019, but the discussion stalled in the House of Representatives (DPR). After more than five years, the House of Representatives finally included the bill in its national legislation programme. 

If the Bill passed, Indonesia would follow Singapore and Malaysia who already have a clear legal framework for national cybersecurity governance. 

To subscribe to the GovInsider bulletin click here.

Government's strategic steps  

Komdigi’s Deputy Minister explained several strategic steps that the government has taken to improve cybersecurity.

First, of these, according to him, is improving regulation compliance. The government already has a set of regulations to address this threat such as the Personal Data Protection Law (PDP Law) that comprehensively regulates the rights and obligations of every stakeholder in terms of data security. 

This law also sets high security standards and binding legal provisions for all private and public electronic system providers that manage citizens' personal data.

The Ministry of Komdigi has also issued a circular on AI Ethical Guidelines that specifically ensures the development and implementation of responsible AI in Indonesia.   

On the regional front, the Ministry actively participates in the ASEAN Cyber Security Cooperation, partnering with other countries and exchanging international threat intelligence to build national cyber resilience. 

Focus on prevention 

Reflecting on the recent ransomware attack on the National Data Centre, Nezar emphasised that the government would focus on prevention and improving incident response capabilities in every government agency.

The government's countermeasures will be directed towards technologies that provide greater visibility in detecting cyberattacks in real-time, including the use of AI. It will also improve security protocols across government agencies, especially those that deliver public services or manage critical infrastructure. 

"Let us ignite the spirit to always be one step ahead of cybercriminals," said Nezar.  

The Ministry of Komdigi will also update technical guidelines in terms of information security standards in every public electronic system, conduct security audits, and facilitate security certification for ministries, agencies and local governments. 

Involving the private sector players 

Nezar also said that the government is partnering with the private sector to improve the country's cyber security posture. 

"The private sector, which includes national and global technology companies, is an important partner of the government in preventing cyber threats, especially in the aspects of capacity building and infrastructure protection," said Nezar. 

As criminals use artificial intelligence (AI) to exploit system vulnerabilities at an unprecedented scale and speed, solutions provided by the private sector will be crucial. 

"The government encourages AI and advanced technology to be used as tools to protect our digital space, not to destroy it," he added.  

Nezar highlighted the disruptive impact of cyberattacks on various vital sectors, ranging from public services to the digital economy. This is why a multistakeholder collaboration approach is necessary to ensure national cybersecurity. 

"Cyber security is not the responsibility of the government alone. It is important for all of us to build awareness to start getting used to maintaining data security in our respective organisations."  

With strong collaboration between the government, private sector, and society, Nezar hopes that Indonesia can build a safe, innovative, and globally competitive digital ecosystem.