Data Protection and Privacy 2026

INDONESIA Law and Practice Contributed by: Raditya Kosasih, Dimas Triandhanu Utomo, Nicholas Glenn and Nabila Oktavia Annyndira, ALTA Advocates

ALTA Advocates is an Indonesian law firm offering a comprehensive range of corporate, commercial, and technology-focused legal services. The firm advises on matters involving general corporate, mergers and acquisitions, investment, capital markets, banking and finance, debt restructuring, start-ups and venture capital, privacy and data protection, cybersecurity, artificial intelligence (AI), web3, TMT, ESG, fintech, crypto-asset trading and exchanges, and intellectual property. ALTA Advocates is well known for its strong focus on privacy and personal data protection. The

team delivers comprehensive and end-to-end ser - vices to various Indonesian and global companies to ensure their privacy and data protection compli - ance, including drafting internal policies, key docu - mentation (RoPA/DPIA/privacy notices), data-sharing agreements, DPO support, trainings, and incident handling. With its deep expertise in data protection, ALTA Advocates has worked closely with stakehold - ers across key industries and has been actively in - volved in policy-making initiatives with the Indone - sian government.

Authors

Raditya Kosasih is a highly experienced data protection lawyer and former Group DPO with 15+ years in both private practice and in-house roles. His practice focuses on privacy and personal data

Nicholas Glenn specialises in personal data protection, and general corporate law (including corporate

M&A and capital markets). His experience extends to the critical areas of end-to-end personal data protection programme implementation, including navigating data breach incidents for clients. Nicholas has also assisted start-ups and tech-based companies in trade (retail and distribution), financial technology, telecommunications, and FMCG industries with company restructuring, fundraising legal instruments, TMT matters, and business licensing. Nicholas is a member of the Indonesian Association of Data Protection Practitioners (APPDI).

protection, cybersecurity, intellectual property, artificial intelligence, fintech, investment, capital market, and general corporate matters. Kosasih is a co-founder of the Indonesian Association of Data Protection Practitioners (APPDI), and is also a member of the International Association of Privacy Professionals (IAPP), and the OECD’s Expert Community on Data Free Flow with Trust (DFFT). Kosasih is also a certified assessor for a DPO certification body in Indonesia.

Nabila Oktavia Annyndira specialises in general corporate, M&A, and personal data protection, including M&A transactions, start-up fundraising, corporate establishment and restructuring, day-to-day legal

Dimas Triandhanu Utomo has over 15 years of experience as a corporate lawyer, including serving as a partner at a reputable law firm and as vice president of the Legal Team at Gojek Group. His practice focuses on

support through retainer services, legal due diligence, and matters relating to competition and employment law. Via has been actively involved in end-to-end personal data protection services, ranging from drafting internal policies, privacy notices, RoPA and DPIA drafting and advisory, and supporting clients in the day-to-day implementation of personal data protection matters under retainer arrangements. She has worked with clients and counterparties across various key sectors. Via is a member of the Indonesian Association of Data Protection Practitioners (APPDI).

general corporate and M&A matters, including fundraising, venture capital and private equity investments, start-up growth, restructuring, foreign investment, joint ventures, and corporate governance, as well as privacy and data protection. He is a member of the Indonesian Association of Data Protection Practitioners (APPDI), and the International Association of Privacy Professionals (IAPP), and has passed the CIPP/E certification.

157 CHAMBERS.COM

Powered by