Knowledge

PP TUNAS (Government Regulation of the Republic of Indonesia No. 17 of 2025) was introduced as a strategic initiative by the Indonesian government to address the growing challenge of protecting children’s personal data in the digital era. As technology rapidly evolves and digitalization expands across sectors such as education and entertainment, children are increasingly interacting with digital platforms that collect and store their personal information. From e-learning apps to online games, children’s data has become part of a complex digital ecosystem.

This situation highlights the urgent need for dedicated regulations that ensure children’s data is secure and protected from misuse. PP TUNAS provides technical guidance aimed at safeguarding children’s personal data while strengthening the mandate of Law No. 27 of 2022 on Personal Data Protection (PDP Law). Together, these laws lay the foundation for building a safe, child-friendly, and responsible digital environment.

What Is PP TUNAS (Government Regulation of the Republic of Indonesia No. 17 of 2025)?

PP TUNAS is a regulation designed to govern the operation of electronic systems to protect children from potential misuse of their personal data. It specifically focuses on safeguarding children’s data in the context of increasing digital technology use, considering the risks they may face, such as data exploitation and other negative effects from online interactions.

The regulation offers guidelines for electronic system operators on how to handle children’s personal data—including its storage, processing, and deletion—securely and in accordance with applicable laws.

Why PP TUNAS Is Crucial for Child Data Protection

Children, as digital natives, are more vulnerable to various online threats. PP TUNAS plays a critical role in minimizing such risks, including:

• Misuse of personal data

• Cyberbullying

• Other negative impacts of digital interaction

Key Reasons Why This Matters

1. Enhancing Child Data Security

   PP TUNAS mandates that any data collected about children must be processed and stored with extreme care, especially given its sensitive nature.

2. Parental Consent Requirement

   One of PP TUNAS’s core provisions is that electronic system operators must obtain consent from parents or guardians before collecting children’s personal data. This provides greater control for parents over their children’s data.

3. Preventing Data Exploitation

   The regulation prohibits the collection of children’s personal data for commercial purposes without explicit parental consent, aiming to prevent manipulation or exploitation.

4. Risk Assessment for Digital Platforms

   All digital platforms engaging with children must undergo risk assessments to ensure their safety and prevent exposure to inappropriate or harmful content.

PP TUNAS vs PDP Law: What’s the Difference?

The PDP Law is the overarching legal framework in Indonesia that defines data subject rights, data controller and processor obligations, and the principles of personal data protection. PP TUNAS serves as a more technical and specific derivative regulation, focusing solely on the protection of children’s personal data as a vulnerable group in digital data processing. JDIH Sekretariat Negara

Both laws complement one another by offering a comprehensive approach to securing personal data, including:

• Parental Consent

  The PDP Law requires operators to obtain explicit parental consent when collecting children’s data. PP TUNAS further specifies that such consent must be clear and accountable.

• Child Data Protection

  While the PDP Law demands stricter protection of children’s data, PP TUNAS provides detailed technical measures that platforms must implement when involving children.

• Responsibility of Digital Platform Providers

  Both regulations place the responsibility on platform providers to protect children’s data and ensure their platforms are safe from threats like data exploitation and inappropriate content.

How to Implement PP TUNAS in Your Organization

Data protection experts, such as PDP consultants, play a vital role in helping organizations and digital service providers comply with PP TUNAS and the PDP Law. Their support includes risk identification and aligning internal policies and systems with current legal requirements.

An effective action plan includes:

1. Developing Child Data Protection Policies
   Assisting organizations in drafting proper policies, risk assessments, and mechanisms for parental consent.

2. Compliance Audits
   Conducting audits to ensure organizational practices align with PP TUNAS and PDP Law requirements.

3. Training and Awareness
   Educating employees and stakeholders on the importance of child data protection and how to secure children’s data within the system.

4. Managing Data Breach Risks
   Designing risk management strategies to prevent breaches, including the use of secure technologies and infrastructure.

Industries Impacted by PP TUNAS

PP TUNAS has broad implications across various industries—particularly those that directly interact with children or manage their personal data in digital services. Key sectors include:

• Technology and Digital Platforms
  • Social media, mobile apps, online games, and e-commerce platforms must ensure data protection and obtain verifiable parental consent.
• Education and Online Learning Services
  • E-learning platforms, schools, and educational institutions collecting student data must comply with strict privacy standards.
• Healthcare
  • Child healthcare providers, hospitals, and health apps must ensure the confidentiality and security of children’s medical data.
• Advertising and Digital Marketing
  • Advertisers targeting children or using behavioral data must comply with data privacy laws to avoid misuse.
• Digital Finance and Banking
  • Payment and banking apps used by children must protect financial and personal information under PP TUNAS.
• Media and Entertainment
  • Streaming platforms and entertainment providers offering content to children must safeguard data from unauthorized access.
• Transport and Delivery Services
  • Services involving children (e.g., ride-hailing, public transport) must also protect the personal data of young users.

Conclusion: PP TUNAS and the Future of Child Data Protection

PP TUNAS significantly enhances child data protection in Indonesia’s digital ecosystem by establishing strict governance over the handling of children’s personal data. Data protection professionals, such as Pelindungan Data Pribadi (PDP) consultants, are essential in ensuring regulatory compliance and safe data practices across all sectors. With this regulation, Indonesia moves toward a safer, more responsible, and child-friendly digital landscape.

Need support to design your Personal Data Protection framework for children?
Contact Robere & Associates (Indonesia) via WhatsApp at  0811-9555-476 and build a governance system that is adaptive and future-ready.