Personal Data Protection Regulations

Understand the laws that regulate personal data processing in the financial service industry which are adhered to by Jack.

Table of Contents

• Related Articles

As a PSP and controller or processor of personal data, Jack complies with personal data protection regulations in the Personal Data Protection Act and Bank Indonesia Regulations. Personal data protection in Indonesia is regulated at the national level, namely through Act no. 27 of 2022 concerning Personal Data Protection. Bank Indonesia specifically regulates the processing of data and/or information processing to be complied with PSP, like Jack, in Bank Indonesia Regulation (BIR) No. 22/23/PBI/2020 concerning Payment Systems and BIR No. 23/6/PBI/2021 concerning Payment Service Providers. The scope of those regulations include:

1. Types of personal data;

2. Personal data subject rights (Jack users);

3. Processing of personal data;

4. Obligations of personal data controllers and processors in processing personal data; and

5. Transfer of personal data.

Those regulations are Jack's guidelines for processing and protecting Jack's user personal data. In general, Jack's obligations in implementing the principles of personal data protection include the following:

1. Has a basis for processing personal data;

2. Has consent from the subject of personal data processing;

3. Carry out limited and specific, lawfully, and transparently processing of personal data; 

4. Carry out the processing of personal data in accordance with the purpose of processing personal data;

5. Record all personal data processing activities;

6. Protect and ensure the security of personal data; and

7. Delete and destroy personal data.

Please click here to visit our website, or click here to join Jack!

Related Articles

• Legal Ground in Providing the Service
• Personal Data Protection Scope
• My Rights as a Personal Data Owner