Get ready for Indonesia's PDP Law before GR 33/2026 takes effect on 16 January 2027
Phylex Comply is a personal data protection compliance workspace, with technical evidence straight from Phylex Scan. We are building it now. Join the waitlist, or start today with a PDP Readiness Check guided by our team.
What companies need to prepare
A summary of the main obligations for data controllers under the PDP Law and GR 33/2026. This is a general overview, not legal advice.
Lawful basis
Every processing of personal data has a lawful basis, such as consent, contract, or legal obligation.
Policies & processing records
Internal policies and records of processing activities, including records of data transfers, ready for inspection.
DPIA
A data protection impact assessment for high-risk processing.
Data protection officer
Appointing a DPO when any of the criteria apply.
Security of processing
Technical and organisational measures to protect data, and evidence of them.
Incidents within 72 hours
A procedure to notify data subjects and the authority of a data protection failure within 3×24 hours.
What we are building
The planned scope of Phylex Comply. Order and scope may change based on feedback from the waitlist.
Readiness check
A guided questionnaire, scores per area, and tasks you can assign to your team.
Processing register (RoPA)
Records of processing activities and data transfers, ready to export.
Guided DPIA
Whether a DPIA is required, templates, and tiered approval.
72-hour incident plan
Countdown, response steps, and draft notifications.
Data subject requests
A register of access, correction, and deletion requests with deadlines.
Technical evidence from Phylex Scan
Your latest scan results become evidence for security-of-processing controls.
Start today: guided PDP Readiness Check
The Phylex team walks you through a readiness questionnaire and a 1–2 hour working session, then delivers a PDF report with gaps and priorities. For companies that want to know where they stand before 16 January 2027.
Frequently asked questions
Does Phylex Comply guarantee my company complies with the PDP Law?
No. Phylex Comply is a tool to prepare and document compliance. It is not a certification and not legal advice. For legal decisions, involve your legal counsel.
When will Phylex Comply be available?
We are building it together with our first users. People on the waitlist hear first. In the meantime, the guided PDP Readiness Check is available now.
Do I need a Phylex Scan subscription?
No. But if you use Phylex Scan, your scan results can be used directly as technical evidence for security of processing.
When does GR 33/2026 take effect?
Government Regulation 33/2026 implementing the PDP Law was promulgated on 16 July 2026 and takes effect on 16 January 2027.
The information on this page is general and is not legal advice. The Indonesian version prevails.