State of Digital Activity in Indonesia and Germany: Personal Data Transfer Between the Two Countries

Authors

Rasya Athalla Aaron

Matheace Ramaputra Sirait
This CIPS policy paper analyzes cross-border data flows between Indonesia and Germany under the IEU-CEPA framework. While high-tech, automotive, logistics, and financial sectors rely on seamless data transfers across Global Value Chains, compliance challenges persist because of strict EU GDPR liability, Indonesia's non-operational Personal Data Protection (PDP) supervisory authority, and a lack of Transfer Impact Assessment (TIA) guidelines. To resolve these structural gaps, the brief recommends enacting supporting presidential regulations, upgrading national Data Protection Officer (DPO) competency standards, and establishing domestic Standard Contractual Clauses (SCCs) aligned with European frameworks.








































