Liability for Customer Data in the Hands of Third Parties in the Insurance Sector
The growing digitalization of Indonesia’s insurance industry has expanded the flow of customer data across insurance companies, brokers, vendors, and digital platforms, increasing exposure to privacy and security risks. Under Law Number 27 of 2022 on Personal Data Protection (“PDP Law”), insurance companies, as data controllers, remain legally responsible for any processing carried out by third-party processors,…