It’s mandatory if:
- You’re processing data for public services.
- Your core activities involve large-scale, systematic monitoring of personal data.
- You handle sensitive data or criminal data on a large scale.
Stay tuned for more detailed regulations from the Indonesian DPA!