Indonesia — Cyber Threat Profile
By 2026, Indonesia has entered a period of strict enforcement for the Personal Data Protection (PDP) Law, which became fully actionable in late 2024. The Personal Data Protection Authority (PDPA) is now actively issuing administrative sanctions, including fines of up to 2% of annual revenue for non-compliance. The National Cyber and Crypto Agency (BSSN) is currently finalizing new regulations for 5G security and AI governance. Indonesia's strategy focuses on securing its massive digital economy and protecting critical infrastructure from regional ransomware trends. Organizations are now mandated to appoint Data Protection Officers and conduct regular audits, marking a significant cultural shift toward digital accountability.- National CERT/CSIRT: ID-SIRTII/CC
- World Cybercrime Index 2024 (origin significance): 1.17 / 100, #29 worldwide
- Secure Internet servers per 1M people (2024): 2,939.5 (source: World Bank)
- Internet users (2024): 72.8% of population (source: World Bank)
Read the full analysis on IntelFusions