Indonesia’s PDP Law Update: Broader DPO Mandate Confirmed, Further Clarity Expected on Data Disclosure and Cross-Border Transfers

As discussed in our previous client alerts ( available here ), Law No. 27 of 2022 on Personal Data Protection (“PDP Law“) has raised questions about when data controllers must appoint a Data Protection Officer (“DPO“) orPejabat/Petugas Pelindungan Data Pribadi (in Bahasa Indonesia). The PDP Law sets out three conditions under which a DPO must […]
The Office of the Personal Data Protection Committee: Press Conference on Fines Imposed on Five Organisations in the Public and Private Sectors for Data Breaches

Introduction On Friday, 1 August 2025, the Office of the Personal Data Protection Committee (“PDPC Office“) held a press conference to announce its proactive enforcement measures under the Personal Data Protection Act B.E. 2562 (2019) (“PDPA“). The PDPC Office disclosed that administrative fines had been imposed on both government and private sector organisations that have […]
Public Consultation Paper Issued on Proposed Regulatory Framework for Retention, Preservation and Disclosure of Communications Data for Investigation Purposes
Singapore and the European Free Trade Association Successfully Conclude Negotiations on a Digital Economy Agreement

Singapore and the European Free Trade Association (“EFTA“) States have successfully concluded negotiations on the EFTA-Singapore Digital Economy Agreement (“ESDEA“) on 10 July 2025. The ESDEA establishes a robust framework for digital connectivity between Singapore and the EFTA States, featuring rules and commitments designed to boost digital trade, enable open and secure cross-border data flows, […]
Protecting Your Confidential Information – Lessons from Data Protection and Employment Perspectives

Introduction The protection of confidential information continues to be a thorny issue for employers. Employees have to be provided access to corporate documents in the course of their work, which frequently include valuable and proprietary information such as client data, trade secrets, sales, marketing, operational, financial or personal data. In the modern context where such […]
MAS Publishes Report on Use of Tokenised Bank Liabilities to Enhance Transaction Banking

On 3 July 2025, the Monetary Authority of Singapore (“MAS“) published a Report on the Use of Tokenised Bank Liabilities for Transaction Banking (“Report“). The Report shows how tokenised bank liabilities, underpinned by shared ledger infrastructures, can enable 24/7 real-time settlement across borders and help optimise liquidity management in transaction banking. The Report highlights two main challenges […]
Instruction on the Building of Telecoms Infrastructure in Designated Areas or Constructions

Introduction On 16 June 2025, the Ministry of Land Management, Urban Planning and Construction issued Instruction No. 001 on the Building of Telecommunications Infrastructure in Towns, Residential Areas, Borey, Co-Owned Buildings, Commercial Buildings, Shopping Malls, Industrial Areas, Special Economic Zones, and Other Designated Areas or Constructions (“Instruction“). In line with the 2015 Telecommunications Law and […]
Singapore Launches New Tools to Help Businesses Protect Data and Deploy AI in a Trusted Ecosystem

Singapore has introduced three new initiatives to create a trusted ecosystem for the safe and responsible deployment of technologies, particularly artificial intelligence (“AI“): (i) the new Global AI Assurance Sandbox; (ii) a new privacy enhancing technology (“PET“) adoption guide; and (iii) the Singapore Standard for Data Protection. These initiatives seek to encourage maximal innovation by […]
Protection from Scams Act in Force from 1 July 2025

The Protection from Scams Act 2025 (“Act“) came into effect on 1 July 2025.The Act enables the Police to better protect targets of ongoing scams by empowering the Police to issue Restriction Orders (“ROs“) to banks to restrict the banking and credit facilities of the scam target(“Individual“). The key features of the Act are set […]
New Law on Personal Data Protection Comes into Operation on 1 January 2026

Introduction On 26 June 2025, the National Assembly approved the long-awaited Law on Personal Data Protection (“PDP Law“). The PDP Law, which comes into operation on 1 January 2026, is the first formal law dedicated specifically for personal data protection, elevating the subject beyond just a government decree (under Decree 13/2023/ND-CP on protection of personal […]