Monsoon LedgerIndonesia AI governance

Indonesia, AI governance tracker

Monsoon Ledger

AI governance from the archipelago, promises checked against the record.

Monsoon Ledger is a public, bilingual tracker of how Indonesia governs artificial intelligence. Every entry is tied to primary or official sources, labelled with how strong the evidence is, and compared with the EU AI Act and frontier AI safety practice. Key quotes stay in the original Bahasa Indonesia, with an English line under them.

The monsoon is forecast and announced long before it arrives. Indonesia's AI rules have worked the same way. This ledger records what was promised and what actually showed up.

01

Safety lens matrix

The same four questions asked of every entry. Select a cell to see the answer and the evidence behind it. Unclear means public sources do not answer the question yet. It does not mean no.

Method
  • Yes or binding
  • Soft
  • Unclear
  • No or none
Safety lens answers for every entry, one row per entry and one column per topic
EntryIncident reportingUnacceptable usesGeneral-purpose modelsEnforcement
The AI rules that keep almost arrivingOfficial statement
Three risk tiers, not fourOfficial statement
A 72-hour breach clock, and nobody to callPress report
Report everything, not just high riskOfficial statement
ASEAN's generative AI guide asks the region to explore incident reportingOfficial statement
Circular Letter 9/2023 sets AI ethics guidance, with no incident dutyLegal text
Covered3 of 62 of 61 of 61 of 6

Select a cell to see the question, the answer and the evidence behind it.

02

Promise vs Reality

Janji vs Kenyataan

The public promises officials have made about Indonesia's AI rules, each with a computed outcome and a receipt.

Open the full ledger

4 of 5 dated promises missed as of

  • 4Missed
  • 1Open
  • 0Met

Not counted: 1 conditional and 1 status claim, which set no deadline.

Most recent promises

03

Latest entries

All entries
  1. The AI rules that keep almost arriving

    Indonesia has two draft presidential regulations on AI, a national roadmap and an ethics rule. Officials have announced a finish line at least five times since January 2025, and both are still drafts.

    DraftOfficial statement
  2. Three risk tiers, not four

    The draft ethics regulation sorts AI into low, high and unacceptable risk, one fewer tier than the EU AI Act. High risk means a system uses specific personal data, unacceptable means it could threaten security and safety, and a public-service chatbot is the example of low risk. Each ministry sets its own risk standards for its sector. The rule carries no criminal sanctions, relies on self-assessment, and requires incident reporting channels.

    DraftOfficial statement
  3. A 72-hour breach clock, and nobody to call

    Government Regulation 33/2026, signed on 16 July 2026, sets out how Indonesia's 2022 personal data law works in practice. From 16 January 2027, organisations must notify affected people and the supervisory authority within 72 hours of confirming a breach, and the authority can fine up to 2% of annual gross revenue. But that authority has not been created. The presidential regulation needed to set it up has not been issued, and on 27 July 2026 the ministry opposed a court petition asking for a deadline.

    SignedPress report

04

Radar

Twice a week a scanner checks Indonesian and ASEAN news and official legal databases. What it finds waits here, unreviewed, until the author reads the source.

Open the Radar

Last scan: