Draft Cybersecurity and Resilience Bill Not to Be Published
Commission I of the House of Representatives (DPR) is set to discuss the draft Cyber Security and Resilience Bill alongside the government. The Chairman of Commission I, Utut Adianto, has requested that the draft currently being prepared by the government not be published yet.
“These drafts should not be released yet because it could lead to too much fake news,” Utut stated during a meeting between Commission I and the government on Monday, 29 June 2026.
He noted that there will be an appropriate time to release the draft of the Cyber Security and Resilience Bill to the public. The PDI Perjuangan politician added that the regulatory draft would be made available if necessary and after it has passed various stages of discussion. “Once we have progressed through the stages, if it is required, we will provide it to the public,” Utut said.
The legislative body has formed a working committee (panja) to discuss the Cyber Security and Resilience Bill. The Vice Chairman of Commission I, Sukamta, has been appointed as the head of the working committee, with members representing each political faction within the security-focused commission.
Meanwhile, the executive branch’s working committee has been left to the government’s discretion. Commission I Chairman Utut Adianto urged the government to appoint a diligent working team, noting that persistence is required to discuss the bill due to its complex and tedious nature. During the forum, a list of problem inventories from each faction was also submitted to the government.
Commission I also warned that the discussion of the Cyber Security and Disruption Bill should not be rushed, as several substantive elements are believed to still contain loopholes.
Utut assessed the Cyber Security and Resilience Bill as a new regulation that will serve as the foundation for national cyber security operations. Therefore, he emphasised that the discussion must be conducted carefully, involving teams that understand cyber security developments and applicable best practices.
“This is a new matter. For a new piece of legislation, we must be very serious,” Utut remarked.
He noted that one area requiring special attention is the regulation of cybercrimes that do not yet have equivalents in other existing laws. He believes the bill will serve as Indonesia’s footing in facing future digital security challenges.
During the meeting, Deputy Minister of Law Edward Omar Sharif Hiariej read the President’s explanation regarding the Cyber Security and Resilience Bill. The government stated that the regulation is being drafted as a basis for managing national cyber security and resilience, as well as protecting information infrastructure, particularly critical information infrastructure, which is frequently targeted by cyberattacks.
The drafting of this policy comes amidst increasing attention to national digital security in recent years. Indonesia has repeatedly faced data breach incidents and cyberattacks targeting public services and government electronic systems. This situation has led to pressure for the government to have a legal umbrella specifically regulating national cyber security and resilience governance.
The government has proposed at least ten key regulatory points within the bill. These include the obligation of infrastructure providers to protect the systems they own, manage, or operate; the enhancement of human resource capacity, technology, and business processes; international cooperation; and the strengthening of the government’s role in establishing national cyber security standards.
Additionally, the proposed regulations include the implementation of technical audits for cyber incidents; public participation; funding sources; investigations; the imposition of administrative sanctions; and criminal provisions for cybercrimes not yet covered by other legislation.