A civil society group has raised the alarm over a new trade deal signed between Indonesia and the United States. The government announced the deal on July 22, 2025, and included rules about digital trade and the movement of data across borders.
Public Concerns Grow Over Privacy in U.S.-Indonesia Trade Agreement
According to the group, this agreement could put the personal data of Indonesian citizens in danger.
The group claims the government made the deal without enough public discussion or proper checks. They say the agreement lets personal data flow freely to the U.S. and could weaken Indonesiaâs existing data protection rules.
One major concern is that Indonesia has agreed to treat the United States as a country that protects data well enough to receive personal information from Indonesians. But the group says this is risky. The United States does not have a strong law that protects privacy like Indonesiaâs Personal Data Protection Law, also known as UU PDP.
The group also warned about U.S. laws like the Foreign Intelligence Surveillance Act (FISA). These laws could let American agencies collect and access Indonesian data on U.S. servers. They said this is a serious threat. There is no agreement on how the data is used or who is watching over it.
Another issue is that Indonesia still has not set up a special government body to handle data protection, even though the law calls for it. This makes it harder to check if foreign data transfers are safe or legal. Without this, peopleâs private information could be sent abroad without enough protection or permission.
Legal and Oversight Gaps Could Endanger Citizensâ Rights
The group pointed to several problems in the current system. First, the government has not yet set up an official agency to oversee how data is handled in Indonesia. This body plays an important role in ensuring compliance with data protection laws. Without it, there is no one to check if the trade deal respects peopleâs rights.
They also said that the U.S. and Indonesia are not equal when it comes to privacy laws. Indonesia considers privacy a right. But the U.S. does not treat it the same way and has no single law that covers all types of personal data.
Fans board same flights as BTS after buying stolen airline dataâ3 arrested in scandal
A past example was also shared to show what can go wrong. In 2020, the top court in Europe ended a data deal between the EU and the U.S. because of similar issues. The court found that U.S. laws allowed too much spying, and there were not enough protections for peopleâs data. The group fears Indonesia might now be heading down a similar path.
They said the deal was made secretly and gave too much importance to foreign companies instead of focusing on Indonesian citizensâ privacy. This raises doubts about how seriously the government is taking the protection of peopleâs digital rights.
Calls for Urgent Government Action on Data Protection
The group has made a list of things they want the government to do right away. These include urging the government to review the dealâs data rules, establish a proper data protection authority, and finalize rules that clearly explain how to share data with other countries.
They also urge Parliament to investigate how the agreement was made and question whether it puts national privacy at risk. Currently, various sectors in Indonesia apply different data rules, which often overlap or conflict. This new deal could make the situation worse, especially for important areas like health, banking, and government services.
They say itâs important for Indonesia to have strong, clear rules that protect peopleâs data, no matter where it goes. Without that, the risk of misuse, spying, or data theft becomes much higher.
The two countries signed a joint agreement that aims to remove trade barriers and make it easier to transfer personal data between them. But experts and privacy advocates worry that in doing so, the government may have traded away key protections for its citizens.
As the deal moves forward, there is growing pressure on Indonesian leaders to explain how they will keep personal data safe and whether this agreement meets the standards of the countryâs own privacy law.
