Indonesia Passes One Data Law to Govern AI Use

On October 6, Indonesia's House of Representatives unanimously passed the One Data law, a sweeping statute that sets national standards for how the government collects, shares, and protects data — and explicitly governs the use of artificial intelligence and blockchain across the public sector. The bill, known domestically as Satu Data Indonesia, runs to 20 chapters and 141 articles, making it one of the most detailed government data-governance frameworks any democracy has adopted. For a country of more than 270M people spread across thousands of islands, the One Data law is an attempt to make the state speak to itself in one digital language.

The law builds on a 2019 presidential regulation that first introduced the Satu Data concept, but it goes much further. It establishes binding rules on data interoperability between ministries and local administrations, cybersecurity requirements, incident reporting obligations, and the principles under which government data can be managed, shared, and protected. According to AiBC World, which reported the bill's passage on October 7, the framework directly addresses emerging technologies — setting the terms on which AI systems and blockchain tools can be deployed inside national data governance.

What the law actually does

At its core, the legislation attacks a problem familiar to anyone who has dealt with bureaucracy: every agency keeping its own records in its own format, with no reliable way to connect them. The One Data law creates a single national standard for government datasets, with defined roles for who produces data, who safeguards it, and who can access it. Ministries, regional governments, and state institutions will have to align their systems with the national standard, ending the patchwork era in which a citizen's records could disagree with each other depending on which office you asked.

The data-sovereignty provisions are the part global observers are watching most closely. The statute asserts national control over government data and sets strict conditions for its handling — a stance that echoes moves by other large democracies to keep sensitive public-sector information within domestic legal reach. In a region where digital infrastructure is often built by foreign vendors, the One Data law signals that Jakarta intends to write the rules of its own digital house rather than renting them.

Why this matters beyond Indonesia

Most English-language coverage of AI governance is relentlessly Euro-American: Brussels writes a rulebook, Washington issues an executive order, and the rest of the world is treated as an audience. Indonesia's move flips that script. As the world's fourth-most-populous nation and Southeast Asia's largest economy, it is now one of the first major democracies to codify AI use in public-sector data through primary legislation rather than guidelines or pilot programs. The One Data law effectively makes Jakarta a rule-maker, not a rule-taker, in the global conversation about how governments should handle machine intelligence.

The timing is deliberate. Governments across the Global South are racing to digitize public services — from welfare payments to land registries — and the AI vendors knocking on their doors are mostly headquartered elsewhere. A binding national framework gives Indonesian officials leverage in those negotiations: any system processing government data will have to meet Indonesian standards on interoperability, security, and sovereignty. According to analysts following the bill, that leverage could become a template for neighboring countries facing the same asymmetry.

There are real questions the law will have to answer in practice. Centralizing data standards can improve services, but it also concentrates risk: a single national data regime is only as trustworthy as its cybersecurity and its oversight. Civil-society groups will be watching how the incident-reporting and protection provisions are enforced — and whether the One Data law's promise of better governance extends to transparency about how the state's own AI systems make decisions affecting citizens. Passing the statute is the easy part; the next two years of implementation will determine whether it becomes a model or a cautionary tale.

For young Indonesians, the stakes are immediate and practical. A functioning national data standard could mean applying for a scholarship, a business permit, or health coverage without being bounced between offices that cannot read each other's files. The One Data law is, at bottom, a bet that a government that can share data with itself can serve its people faster — and that a democracy of this scale can set the terms for AI in public life on its own authority. The rest of the world should probably start paying attention.

Source: the Digital Watch Observatory covered the bill’s passage on October 6.