Hello there. Welcome back. It's great to see you again. It goes without saying that this is

Emlex's podcast covering the top stories of the moment in the world of regulatory affairs. I'm James Panicki, a senior editor here at Emlex.

Thank you very much for your company today.

Apologies for my slightly raspy voice.

It's just a cold, nothing too serious.

Now, as our readers already know, the largest economy in Southeast Asia, Indonesia,

has adopted a landmark piece of data protection legislation

after many years of discussion and soul-searching on the matter.

It's heavily based on the European Union's general data privacy regulation or GDPR,

but, as we'll hear, there are some country-specific elements to it,

and there is still some uncertainty about

several aspects of the legislation, and also a lack of clarity over what the data protection

enforcement agency might look like. Yet it's clearly an important step, and one that reflects

the significant strides that have been made on data protection

across the region. Jet de Mazzos Santos is Emmex's Southeast Asian correspondent and she joins us now

from Jakarta. Jet, first up, what was the data privacy landscape before this law was passed

in Indonesia.

Right.

So James, data privacy isn't an entirely new concept in Indonesia.

Data protection policies have existed in about 30 regulations and laws, including those specific to sectors like health and banking.

But the main ones, they're collectively called the PDP

regulations or the personal data protection regulations. So there's a 2008 law on electronic

...