Indonesia - National AI Regulation
Draft Presidential Regulation on Artificial Intelligence
Rancangan Peraturan Presiden tentang Kecerdasan Buatan
Indonesia
RAI-ID-NA-RPPTKXX-2025This draft Presidential Regulation (Perpres) establishes a national governance framework for the development, deployment and use of Artificial Intelligence (AI) in Indonesia, pairing a National AI Roadmap (White Paper) with an Ethics and Safety Perpres. It sets out institutional responsibilities, public consultation outcomes, risk-based obligations for developers and deployers, and mechanisms for monitoring, conformity and enforcement to ensure AI advances innovation while protecting rights and security. (portal.komdigi.go.id)
Summary
Background and purpose: The Rancangan Peraturan Presiden tentang Kecerdasan Buatan (Draft Presidential Regulation on Artificial Intelligence) is a government-led regulatory initiative to provide a coordinated national framework for artificial intelligence in Indonesia. The draft pairs a Buku Putih (White Paper) — described as a National AI Roadmap — with a companion Perpres addressing ethics, safety and governance of AI systems. The initiative is led by the Ministry of Communication and Digital (Komdigi) and was opened to public consultation in August 2025; Komdigi subsequently submitted an izin prakarsa for a Perpres to the State Secretariat. The government has stated objectives of promoting inclusive innovation, addressing data protection and intellectual property concerns, and ensuring AI safety and ethics across sectors. ([portal.komdigi.go.id](https://portal.komdigi.go.id/kanal-publik/berita-kini/9526?utm_source=openai))
Scope and structure: The draft is intended to be a horizontally-applicable Perpres (executive regulation) that sets high-level obligations and institutional roles rather than a sector-by-sector technical code. It is structured around: (1) a National AI Roadmap (Buku Putih) describing strategic priorities, capacity-building, and infrastructure; (2) an Ethics and Safety Perpres that contains risk-classification, conformity/registration mechanisms for higher-risk AI systems, transparency and documentation obligations, data protection alignment, cybersecurity requirements, market surveillance and enforcement tools; and (3) governance arrangements placing Komdigi as the coordinating ministry with mandates to convene inter-ministerial working groups and to coordinate with sectoral regulators (e.g., OJK for finance, Ministry of Health for health applications) and security agencies for cyber resilience. ([portal.komdigi.go.id](https://portal.komdigi.go.id/kanal-publik/berita-kini/9526?utm_source=openai))
Key policy pillars: The draft emphasizes (a) ethics and human-centred principles (inclusivity, human dignity, transparency, accountability), (b) risk-based regulation with more stringent duties for high-risk categories, (c) data protection and privacy safeguards in line with existing Indonesian law and sectoral rules, (d) requirements for documentation, model cards and impact assessments to support oversight and redress, and (e) capacity building including support for local AI research, Indonesian-language models, and talent development. The government stated it will publish guidance (e.g., model safety guidelines) and expects collaboration with academia, industry and civil society in implementation. ([portal.komdigi.go.id](https://portal.komdigi.go.id/kanal-publik/berita-kini/9526?utm_source=openai))
Obligations and enforcement: For AI developers and deployers the draft institutes obligations such as pre-deployment risk assessments, safety testing, documentation and record-keeping, transparency disclosures to users, and incident/harms reporting to regulators. High-risk AI systems (categories to be defined in implementing guidance) may be subject to registration/conformity assessment, periodic audits and additional governance controls such as human oversight. Enforcement tools include corrective measures, administrative fines, operational suspensions and public naming; the draft also contemplates coordination with sectoral regulators for domain-specific sanctions. The government aims to harmonize the Perpres with other laws and to complete internal harmonization and legal vetting prior to promulgation. ([antaranews.com](https://www.antaranews.com/berita/5133004/perpres-ai-ditargetkan-masuk-tahap-harmonisasi-akhir-september-2025?utm_source=openai))
Status and timeline: Komdigi released the consultation materials in August 2025 and extended the public comment period to 29 August 2025. Komdigi reported submitting the formal izin prakarsa to the State Secretariat in late August/early September 2025 and targeted completion of harmonization in September 2025, with public statements indicating final promulgation targeted for late 2025 or early 2026 depending on harmonization with the Ministry of Law. The text of the final Perpres was not published publicly as of the last retrieval date. ([portal.komdigi.go.id](https://portal.komdigi.go.id/kanal-publik/berita-kini/9526?utm_source=openai))
Implications: If enacted, the Perpres will create a national-level supervisory and coordination layer for AI in Indonesia that complements existing sectoral rules. It will likely require private sector compliance efforts (impact assessments, data governance, transparency, and possibly registration) and create expanded oversight capacity for government agencies. The draft aims to balance innovation promotion with ethical safeguards and national security, while aligning Indonesia’s approach with international AI governance trends and OECD-style risk-based frameworks. ([teknologi.bisnis.com](https://teknologi.bisnis.com/read/20250809/101/1900734/komdigi-tunggu-masukan-publik-soal-peta-jalan-dan-konsep-etika-ai-hingga-22-agustus?utm_source=openai))
Full article
Read full text ↗Overview
The Rancangan Peraturan Presiden tentang Kecerdasan Buatan is a two-part, executive-level package comprised of (1) a Buku Putih Peta Jalan Kecerdasan Artifisial Nasional (National AI Roadmap White Paper) and (2) a Perpres setting out ethics, safety and governance obligations for AI systems. The initiative, led by the Ministry of Communication and Digital (Komdigi), was opened for public consultation in August 2025 and the ministry reported submission of an izin prakarsa to the State Secretariat in late August–early September 2025. The stated purpose is to accelerate responsible AI development, align multi-stakeholder priorities, and provide a legal umbrella for sectoral regulators and government-led capacity building. For the consultation and download of the White Paper and ethics concept, see the Komdigi public notice and consultation materials. Komdigi: Konsultasi Publik Peta Jalan KA. ([portal.komdigi.go.id](https://portal.komdigi.go.id/kanal-publik/berita-kini/9526?utm_source=openai))
Definitions
The draft defines key terms to reduce interpretive ambiguity for implementation. Definitions typically include: 'Artificial Intelligence' (KA) as computational systems that perform tasks commonly associated with intelligent agents; 'AI system' as a software/hardware assemblage employing AI methods; 'developer' and 'provider' as natural or legal persons designing, training or placing AI systems on the market; 'user' and 'operator' as the party deploying the system; 'high-risk AI' as systems with significant potential for harm to safety, fundamental rights, or critical infrastructure; 'model owner' and 'model deployer'; and 'impact assessment' (assessmen dampak) including privacy/data, safety and socio-economic impacts. These baseline definitions are intended to align with international practice and to enable a risk-based regulatory approach under the Perpres.
Governance and Institutional Framework
The draft designates the Ministry of Communication and Digital (Komdigi) as the central coordinating authority for the Perpres, responsible for publishing the National AI Roadmap, convening inter-ministerial working groups, and issuing implementing guidance. Sectoral regulators (e.g., Otoritas Jasa Keuangan for finance, Kementerian Kesehatan for health) retain authority over domain-specific applications and enforcement. Cybersecurity responsibilities and technical standards coordination are assigned to the National Cyber and Crypto Agency (BSSN). The draft envisages a permanent advisory council or task force composed of government, academia, industry and civil society to support policy development and to advise on priority areas such as talent development, infrastructure and public-interest use cases. The Perpres also foresees collaboration with the State Secretariat for harmonization and with the Ministry of Law for legal vetting. See Komdigi consultation announcement and ePPID extension for dates and process details. Komdigi ePPID: Consultation Extension. ([eppid.komdigi.go.id](https://eppid.komdigi.go.id/berita/detail/perpanjangan-waktu-konsultasi-publik-buku-putih-peta-jalan-kecerdasan-artifisial-nasional-dan-konsep-pedoman-etika-kecerdasan-artifisial?utm_source=openai))
Key Focus Areas
The draft centers on (1) Ethics & Human Rights: embedding principles such as transparency, fairness, human oversight and non-discrimination; (2) Risk-based Classification: distinguishing low- from high-risk AI to calibrate obligations (e.g., mandatory impact assessments for higher-risk systems); (3) Safety Testing & Evaluation: requirements for pre-deployment testing and ongoing monitoring; (4) Data Protection & Privacy: alignment with national data protection frameworks and sectoral rules to safeguard personal data processed by AI; (5) Transparency & Documentation: mandated model cards, provenance logs, and user-facing disclosure for certain systems; (6) Conformity & Registration: pathways for conformity assessment, voluntary certification and mandatory registration for high-risk systems; (7) Cybersecurity & Model Security: measures for model robustness, supply-chain security and mitigation of misuse; (8) Market Surveillance & Enforcement: institutionalized inspection, incident reporting, and sanctions; and (9) Capacity & Localisation: initiatives to support Indonesian-language models, research funding and training. The White Paper emphasizes inclusive growth and identifies priority sectors (healthcare, finance, education, public services, transportation) for early targeted programs. Komdigi Public Notice. ([portal.komdigi.go.id](https://portal.komdigi.go.id/kanal-publik/berita-kini/9526?utm_source=openai))
Implementation Framework
Implementation is described as phased: initial publication of the White Paper and ethics concept; public consultation and revision; formal izin prakarsa submission to the State Secretariat; harmonization with the Ministry of Law; then promulgation as a Perpres. The Perpres establishes a rulemaking and guidance pipeline: Komdigi will issue technical guidelines (e.g., risk taxonomy, conformity procedures, model documentation templates), sectoral regulators will define domain-specific obligations under their statutory remit, and an inter-agency technical secretariat will coordinate cross-cutting activities such as incident reporting, cross-border data flows, and procurement standards for government use. The government has indicated target timelines for harmonization and finalization but retains flexibility contingent on stakeholder inputs and legal vetting. ([portal.komdigi.go.id](https://portal.komdigi.go.id/kanal-publik/berita-kini/9526?utm_source=openai))
Monitoring and Evaluation
The draft envisages continuous monitoring through reporting obligations, periodic audits of registered/high-risk systems, and indicators tracked via the National AI Roadmap. Monitoring includes qualitative reviews (ethics compliance, socio-economic impact) and quantitative metrics (adoption rates, incidents, uptime/availability). The Perpres anticipates a public registry of high-risk systems or certification status, periodic public reporting by Komdigi on AI safety and ethics, and mechanisms for civil-society participation in evaluation. Market surveillance authorities will be empowered to perform inspections and compel remediation. The Perpres design assumes a feedback loop to update the White Paper and technical guidance as the technology and market practice evolve. ([portal.komdigi.go.id](https://portal.komdigi.go.id/kanal-publik/berita-kini/9526?utm_source=openai))
Penalties, Liability, and Appeals
The draft establishes administrative enforcement measures (warnings, corrective orders, temporary suspension of operations, administrative fines), requirements for remediation plans, and public naming for egregious non-compliance. It contemplates coordination with sectoral regulators for joint enforcement (e.g., OJK for financial penalties where applicable). Liability allocation remains anchored in existing civil and criminal frameworks: the Perpres reinforces obligations that support civil liability and potential criminal sanctions for severe negligence or malicious misuse but does not replace existing law. The draft includes an appeals pathway and requires regulators to follow administrative procedural rules when imposing sanctions. The government also signals support for accessible remedies and redress mechanisms for individuals harmed by AI systems. ([portal.komdigi.go.id](https://portal.komdigi.go.id/kanal-publik/berita-kini/9526?utm_source=openai))
Relationship to Other Instruments
The Perpres is intended to complement, not supersede, existing national laws and sectoral regulations: it will interface with personal data protection law, consumer protection statutes, sectoral health and financial regulations, the Electronic Information and Transactions framework, and national cybersecurity law. The Perpres aims to harmonize with Presidential and ministerial regulations already governing electronic systems and public services (e.g., SPBE frameworks) and will include transitional provisions to avoid conflicts. Implementation requires active coordination with the Ministry of Law and Human Rights for legal consistency and with the State Secretariat for procedural approval. ([portal.komdigi.go.id](https://portal.komdigi.go.id/kanal-publik/berita-kini/9526?utm_source=openai))
International Alignment
The draft frames Indonesia’s approach within international trends: a risk-based regulatory model, emphasis on ethics and human oversight, and compatibility with OECD/UN guiding principles on AI governance. Komdigi has indicated that the White Paper and Perpres are developed with reference to international best practice and with awareness of IP and data-flow implications; the Perpres also contemplates international cooperation on standards, cross-border incident response and research collaboration. Indonesia intends to remain open to foreign investment while safeguarding national priorities such as data protection and local capacity-building. Komdigi Consultation Announcement. ([portal.komdigi.go.id](https://portal.komdigi.go.id/kanal-publik/berita-kini/9526?utm_source=openai))
Implementation Timeline
| Milestone | Date / Status |
|---|---|
| Komdigi publishes consultation materials (White Paper & ethics concept) | 8 Aug 2025 (published). Komdigi Notice |
| Public consultation period (initial) | 8–22 Aug 2025 (extended to 29 Aug 2025). ePPID extension |
| Submission of izin prakarsa to State Secretariat | Late Aug / early Sep 2025 (reported). ANTARA report |
| Target harmonization stage | End Sep 2025 (targeted); legal harmonization with Ministry of Law to follow. ANTARA harmonization |
| Anticipated promulgation | Targeted late 2025 – early 2026 (subject to harmonization and legal vetting). |
Sources and References
| Source | Type |
|---|---|
| Kementerian Komunikasi dan Digital — Konsultasi Publik Buku Putih Peta Jalan KA Nasional & Konsep Pedoman Etika | Primary Source |
| Komdigi ePPID — Perpanjangan Konsultasi Publik | Primary Source |
| ANTARA — Kemkomdigi submitted izin prakarsa Rancangan Perpres terkait AI | Primary Source (government reporting) |
| ANTARA — Perpres AI targeted to enter harmonization stage | Primary Source (government reporting) |
Requirements for a company
What an organisation has to do under Indonesia - National AI Regulation, at a glance. Not legal advice — the table below gives the provision and deadline for each item.
Not yet in force (Draft). These requirements apply once the instrument takes effect and may change before then.
Must do
9- Conduct a risk assessment and prepare an impact assessment for high-risk AI systems.Developers and providers of AI systems.
- Register high-risk AI systems and comply with conformity assessment requirements.Developers and providers of high-risk AI systems.
- Ensure personal data processing complies with national data protection frameworks and sectoral rules.Developers, providers, users, and operators of AI systems.
- Perform pre-deployment safety and bias testing and maintain records.Developers and providers of AI systems.
- Prepare model cards, provenance logs, and user-facing disclosures for certain AI systems.Developers and providers of AI systems.
- Implement measures for model robustness, supply-chain security, and mitigation of misuse.Developers and providers of AI systems.
- +3 more in the table below
Must not do
0Nothing in this category.
Should do
0Nothing in this category.
Should not do
0Nothing in this category.
Who must do what
The obligations under Indonesia - National AI Regulation, most serious first. Not legal advice — verify against the official text before relying on it.
| # | Who | Requirement | By when | Where | Severity |
|---|---|---|---|---|---|
| 1 | Developers and providers of AI systems. | Conduct a risk assessment and prepare an impact assessment for high-risk AI systems. “mandatory impact assessments for higher-risk systems” | Before placing on market | — | Critical |
| 2 | Developers and providers of high-risk AI systems. | Register high-risk AI systems and comply with conformity assessment requirements. “mandatory registration for high-risk systems” | Before placing on market | — | Critical |
| 3 | Developers, providers, users, and operators of AI systems. | Ensure personal data processing complies with national data protection frameworks and sectoral rules. “alignment with national data protection frameworks and sectoral rules to safeguard personal data processed by AI” | — | — | Critical |
| 4 | Developers and providers of AI systems. | Perform pre-deployment safety and bias testing and maintain records. “requirements for pre-deployment testing and ongoing monitoring” | Before placing on market | — | Critical |
| 5 | Developers and providers of AI systems. | Prepare model cards, provenance logs, and user-facing disclosures for certain AI systems. “mandated model cards, provenance logs, and user-facing disclosure for certain systems” | Before placing on market | — | Important |
| 6 | Developers and providers of AI systems. | Implement measures for model robustness, supply-chain security, and mitigation of misuse. “measures for model robustness, supply-chain security and mitigation of misuse” | Before placing on market | — | Important |
| 7 | Developers, providers, users, and operators of AI systems. | Establish processes to report safety, privacy, or security incidents to regulators. “incident reporting” | — | — | Important |
| 8 | Developers, providers, users, and operators of AI systems. | Implement human oversight measures for critical decisions made by AI systems. “embedding principles such as transparency, fairness, human oversight” | Before deployment | — | Important |
| 9 | Developers, providers, users, and operators of AI systems. | Embed principles of transparency, fairness, and non-discrimination in AI systems. “embedding principles such as transparency, fairness, human oversight and non-discrimination” | — | — | Important |
Related Regulations
© Regulations.AI · updated on 13-Jun-2026