Crawls the web, in Indonesia

Law No. 28 of 2014, Articles 40 and 46, Copyright Law · Read the law's page

• A database or compilation reproduced from an Indonesian source is protected as its own copyrighted work; reproducing the whole or a substantial part of a digital database is not covered by the personal-use copying exception that applies to other published works.

Law No. 28 of 2014, Articles 9 and 44, Copyright Law · Read the law's page

• Get the rights holder's permission before reproducing a copyrighted work in Indonesia, including through automated collection, unless the narrow research and criticism exception applies.
• The research and criticism exception requires citing the source in full and not harming the creator's reasonable interest; it is not a general text-and-data-mining exception and does not on its own terms cover commercial model training.

Government Regulation No. 71 of 2019 (PP PSTE), Pasal 24(3) · Read the law's page

• On a system failure or disruption with a serious impact resulting from another party's act against your Electronic System, such as an attack or intrusion, secure the affected Electronic Information and/or Electronic Document.
• Report the incident immediately, at the first opportunity, to law enforcement officials and the relevant Ministry or Agency; the Government Regulation states no numeric clock for this report, only immediacy.
• A violation can draw the same Article 100 administrative sanctions (written warning, an administrative fine of an amount this Government Regulation does not itself fix, temporary suspension, access termination, or removal from the operator registry) as this jurisdiction's security-system duty.
• This binds the same Electronic System Operator as this jurisdiction's Article 23/24(1)-(2) security-system duty; it adds an incident-reporting duty rather than reaching a different party.

Government Regulation No. 71 of 2019 (PP PSTE), Pasal 3, 23, 24(1)-(2), 31, 32, 39, 40 · Read the law's page

• Operate your Electronic System reliably and securely, and take legal responsibility for it operating as it should.
• Secure your Electronic System's components, and have and run procedures and means to protect the system against disruption, failure, and loss.
• Provide a security system covering procedures and technical measures, such as antivirus, anti-spam, a firewall, intrusion detection or prevention, or an information security management system, to prevent and counter a threat or attack against your Electronic System.
• Protect your users and the wider public from harm caused by the Electronic System you operate, and provide, train, and equip personnel tasked with and responsible for securing the system's facilities and infrastructure.
• Where you operate an Electronic Agent, an automated device that carries out an action on Electronic Information for a user without that user's direct intervention, such as an automated transaction or e-commerce system, additionally run a standard operating procedure meeting six security-control principles for user data and Electronic Transactions: confidentiality, integrity, availability, authenticity, authorization, and non-repudiation, and test a transacting user's identity and authorization before completing the transaction.
• A violation of Articles 23, 24, 31, 32, 39(2), or 40 can draw an administrative sanction from the Minister, a written warning, an administrative fine of an amount this Government Regulation does not itself fix, temporary suspension, access termination, or removal from the Electronic System Operator registry; the Article 100 sanction list does not name Article 3 itself.
• This binds every Electronic System Operator under Indonesian law, whether a government body (Penyelenggara Sistem Elektronik Lingkup Publik) or a private business (Penyelenggara Sistem Elektronik Lingkup Privat), with no sector or size gate.

Law No. 27 of 2022, Article 20, Personal Data Protection Law · Read the law's page

• Have a lawful basis under Article 20 before collecting or otherwise processing the personal data of an individual in Indonesia, including data collected from a public website; the Act carries no basis keyed to the data already being public.

Law No. 1 of 2023, Article 332, Criminal Code (KUHP) · Read the law's page

• Do not access another person's computer or electronic system without right or unlawfully, or access any computer or electronic system without right or unlawfully in order to obtain electronic information or documents from it.
• A higher penalty tier applies where the access violates, breaks through, exceeds or breaches a security system.

Two draft Peraturan Presiden included in the government's 2026 Presidential Regulation formulation program under Keputusan Presiden Nomor 38 Tahun 2025; drafted by the Ministry of Communication and Digital Affairs; in final discussion stage, not yet signed as of August 2026

• This measure is proposed and binds nobody yet; what follows is what it would require if it is enacted in this form.
• Register your AI model in the national AI model registration system.
• Provide a model card transparency disclosure for high-risk AI systems.