What is the UU PDP DSAR deadline?

Under Undang-Undang Pelindungan Data Pribadi (Law No. 27 of 2022) (UU PDP), the standard response deadline is 30 days. The counting method is calendar days, starting from the day of receipt.

UU PDP is enforced by Ministry of Communication and Information Technology (Kominfo). Maximum penalties: Up to 2% of annual revenue; criminal penalties up to 6 years imprisonment.

🇮🇩UU PDP

Indonesia — PDP Law DSAR Deadline Calculator

Q: Can I extend a UU PDP deadline?

No. UU PDP does not provide for deadline extensions under standard circumstances.

Calculate your exact response deadline under Undang-Undang Pelindungan Data Pribadi (Law No. 27 of 2022) (UU PDP).

Configure your DSAR

Select jurisdiction, request type, and date — results update instantly.

Jurisdiction

Your deadline will appear here

Select a jurisdiction and request type to get started

UU PDP Overview

Full Name

Undang-Undang Pelindungan Data Pribadi (Law No. 27 of 2022)

Effective Since

2024-10-17

Regulatory Authority

Ministry of Communication and Information Technology (Kominfo)

Official Text

View law

Maximum Penalties

Up to 2% of annual revenue; criminal penalties up to 6 years imprisonment

Request Types & Deadlines

Request Type	Deadline	Extension
Right of Access Art. 7 — Right to access and obtain a copy of personal data	3 days	Not available
Right to Correction Art. 8 — Right to request correction of inaccurate personal data	30 days	Not available
Right to Deletion Art. 9 — Right to request deletion of personal data	30 days	Not available
Right to Portability Art. 13 — Right to transfer personal data to another controller	30 days	Not available
Right to Withdraw Consent Art. 9 — Right to withdraw consent for data processing	30 days	Not available

Extension Rules

UU PDP does not provide for deadline extensions under standard circumstances.

Special Rules & Common Mistakes

•Access requests must be responded to within 3×24 hours (72 hours)
•General DSAR responses must be provided within 30 calendar days
•Two-year transition period from enactment: full enforcement from October 17, 2024
•Cross-border data transfers permitted if recipient country has equivalent protection
•Mandatory breach notification within 3×24 hours of discovery
•A dedicated Data Protection Authority is being established

Compare with Other Jurisdictions

Law	Deadline	Method	Extension
🇮🇩 Indonesia PDP	30 days	calendar days	No
🇪🇺 EU GDPR	1 months	calendar months	+2 months
🇬🇧 UK GDPR	1 months	calendar months	+2 months
🇺🇸 CCPA	45 days	calendar days	+45 days