By Muhammad Deckri Algamar, AIGP
With Prof. Abu Bakar Munir

Powered by
Carousel series
Salinan v5.8 · 28 Sep 2026
The carousel series

Practitioner (notes)

The same verified material cut for reading on a feed: twelve issues, one theme at a time, every figure counted from the texts and every European authority resolved against the stored corpus before a deck will build. Open an issue and step through it with the arrow keys, or post the PDF as a carousel.

Practitioner (notes)No. 01 1,368 daysof waiting Are Indonesia's data protection rules operable at all? Indonesia, personal data protection · September 2026 Practitioner (notes)No. 02 Lawful access isnow disproportionate? Will Indonesia's warrantless data access mechanism survive the adequacy test? Indonesia, lawful access · August 2026 Practitioner (notes)No. 03 Your processor stepped backYou carry the duty alone Indonesia's implementing regulation moved the transfer risk assessment onto the controller alone and softened the verb that made it mandatory. Indonesia PP 33/2026 duties · August 2026 Practitioner (notes)No. 04 The draft had a GDPR Article 48the regulation does not Indonesia's transfer rules are enacted, and the foreign court order now has to be handled in your contract instead of the regulation. Indonesia data transfer rules · August 2026 Practitioner (notes)No. 05 Indonesia kept every rightIt moved the burden of proof Indonesia's new implementing regulation leaves the subject rights intact and moves almost every decision about them to the controller. Indonesia PDP subject rights · August 2026 Practitioner (notes)No. 06 Indonesia kept the dutyand deleted the audit The controller duties survive. The audit and vetting detail that gave them substance went to a rule nobody has written yet. Indonesia controller accountability · August 2026 Practitioner (notes)No. 07 Indonesia kept the DPIAand dropped the duty to act Indonesia's new implementing regulation keeps the duty to run the assessment but no longer makes acting on it mandatory. Indonesia audit and DPIA · August 2026 Practitioner (notes)No. 08 Withdraw consent in Indonesiaand there is no plan B Indonesia shut the escape route that let controllers switch lawful basis after a withdrawal, and added a test that consent itself must pass. Consent and withdrawal in Indonesia · August 2026 Practitioner (notes)No. 09 A legitimate interestyou cannot object to Indonesia's implementing regulation keeps legitimate interest as a lawful basis and removes the objection right that balanced it. Indonesia, legitimate interest · August 2026 Practitioner (notes)No. 10 Nothing leaked.Notify in 72 hours anyway. Indonesia's enacted breach rule widens what you must report and narrows what you must say. Indonesia PDP breach notification · August 2026 Practitioner (notes)No. 11 Who sues for a mass breachwhen the regulator cannot? Indonesia's implementing regulation rewrites who can sue after a breach and how long every deadline actually runs. Indonesia enforcement and redress · August 2026 Practitioner (notes)No. 12 Indonesia dropped the checklistDo not call that relief. PP 33/2026 keeps the processing stages but attaches no duties to them and it binds every controller from 16 January 2027. Indonesia: scope and commencement · August 2026