DPR Opens Cybersecurity Bill Talks, Draft Kept Private

JAKARTA — Commission I of the Indonesian House of Representatives (DPR RI) has officially entered a new phase in the country’s digital governance. In a working meeting held at the parliamentary complex on Monday (6/29/2026), all factions agreed to discuss the Bill on Cybersecurity and Cyber Resilience together with the government. The agreement marks a crucial step in shielding Indonesia’s digital space from increasingly real threats.

The move is not without reason. Cyberattacks in Indonesia in recent years have targeted a range of vital sectors. From population data to banking infrastructure, the vulnerability of digital systems has created gaps exploited by irresponsible parties. Without a strong and comprehensive legal umbrella, it is difficult for the state to demand accountability from electronic system operators when data breaches occur.

However, Commission I Chairman Utut Adianto issued a specific instruction regarding access to documents during the deliberation process. He asked that the bill draft not be widely published to the public for now. The main reason, he said, is to minimize the potential for disinformation in public discourse. “Please also note that at this stage, these drafts should not be circulated yet, because otherwise there will be too many hoaxes,” Utut said in front of lawmakers and government representatives.

For the public, this restriction naturally raises questions. The public has a right to know. On the other hand, the technical complexity of cyber regulations does risk being misunderstood if only parts of the draft are read without full context. The hope is that the restriction will not last too long so that the legislative process remains within a healthy framework of transparency.

Public Transparency in the Next Stage

Although access is being limited in the early phase, Utut said public participation will remain a priority later on. According to him, the draft will be opened once deliberations reach a stage that indeed requires broader public involvement. Public participation will determine whether the regulation will ultimately be repressive or instead protective of citizens.

In addition to approving the deliberation, Commission I also asked each faction to immediately prepare a List of Inventory of Problems (DIM). The DIM will later serve as the basis for arguments during discussions with the government. If any faction is not yet ready, submission of the DIM may still be made at the working committee (panja) level.

To ensure the effectiveness of the deliberations, Commission I has formed a Working Committee (Panja) led by Commission I Deputy Chairman Sukamta. Panja members consist of representatives from all factions in the DPR. Utut specifically asked the government representatives to prepare a solid and diligent team, considering that discussions on cyber regulations are usually quite complex and exhausting. The synergy between the government and parliament will be tested here.

Why Is the Cybersecurity Bill Crucial?

The importance of this bill lies in the urgency of protecting national critical information infrastructure. The regulation will govern the obligations of every electronic system operator to safeguard the resilience of assets they manage, operate, or own. So far, cyber security standards have been fragmented across institutions without a clear single command.

The scope of the bill is broad. Beyond technical issues, the regulation covers the strengthening of human resources in cybersecurity, domestic technology development, and international cooperation mechanisms. The government is also encouraged to be more active in setting national cybersecurity standards and monitoring anomalies in internet traffic that could threaten national security.

The challenge ahead is how to align technological innovation with security compliance. Cybersecurity is often seen as a cost burden by businesses, even though it is a long-term investment in user trust. If public data is not secure, the digital economy will not grow sustainably.

Some strategic points that will be included in the discussion materials include:

• Technical audits of cyber incidents that have occurred across sectors.
• New criminal provisions for cybercrimes that are not yet covered under existing law.
• Administrative sanctions for system operators negligent in protecting data.
• Mechanisms for public participation and funding support for national cyber resilience.

This move answers the increasingly dynamic challenge of digital security. With stronger regulations, critical infrastructure such as banking, energy, and transportation is expected to be better protected from increasingly sophisticated cyberattacks.

In the end, regulation is just a piece of paper if it is not accompanied by enforcement commitment. After this law is passed, oversight in the field will be the main key. The public will see whether the rule truly provides protection or is merely administrative formality. Cybersecurity is no longer just the concern of computer technicians, but a matter of state sovereignty. The next focus now turns to how the government can draft a balanced policy between technological progress and the protection of citizens’ privacy.

***

**FAQ Summary:**

1. **Why has the Cybersecurity Bill draft not been opened to the public yet?**
The Chairman of Commission I of the DPR RI said the restriction is temporary to prevent unnecessary disinformation or hoaxes during the early phase of deliberations.

2. **Who is responsible for this discussion?**
The bill is being discussed by Commission I of the DPR RI together with the government, with technical operations handled by the Working Committee (Panja) led by Sukamta.

3. **What are the main points that will be regulated in this bill?**
The bill covers technical audits of cyber incidents, new administrative sanctions for negligent parties, strengthened cyber human resources, and new criminal rules for digital crimes not yet covered by current law.