Binding law — in force
People can object to decisions based solely on automated processing, including profiling (Indonesia PDP Law Art. 10)
Under Pasal 10(1) of Indonesia's Personal Data Protection Law (UU No. 27 of 2022), a data subject has the right to object to decision-making based solely on automated processing, including profiling, that produces legal effects or significantly affects the data subject; the procedure for objecting is left to a Government Regulation (Pasal 10(2)). Profiling means identifying a person, including from work history, economic condition, health, personal preferences, interests, reliability, behaviour, location or movements, electronically (Elucidation to Pasal 10(1)). The right does not apply for national defence and security, law enforcement, the public interest in running the state, supervision of the financial sector, monetary and payment systems and financial stability, or statistics and scientific research (Pasal 15). The Law binds every person, public body and international organisation, in Indonesia or abroad where there are legal effects in Indonesia or on Indonesian data subjects abroad (Pasal 2), in force on promulgation, 2022-10-17 (Pasal 76), with two years for controllers to adjust their processing, to 2024-10-17 (Pasal 74). Detect a model-driven adverse decision with no objection route that sends the case to a person.
id-pdp-law.automated-decision-objection · UU No. 27 Tahun 2022, Pasal 10 ayat (1) · official source · jurisdictions: ID