UU PDP (Personal Data Protection Law No. 27/2022)
UU PDP, Indonesia's Law No. 27 of 2022 on Personal Data Protection, classifies health data as specific personal data. It governs controller and processor duties, data-subject rights, processing, security, breaches, transfers, and sanctions.
Put the evidence in context
Review the intended task, source information, human checkpoints and observed results together. A benchmark or sandbox result has a defined scope; it does not establish suitability, approval or performance for every institution.
Read the full explanationCare Workspace connects healthcare work such as appointments, reviewed reporting and follow-up. Micromeet Cowork supports team work with digital employees and reusable Skills, including meeting summaries, decisions and task handoffs.
Read the full explanationLaw No. 27 of 2022 on Personal Data Protection, dated 17 October 2022, lists health data as specific personal data in Article 4. Article 20 requires a controller to identify an applicable processing basis; explicit consent is one of six listed bases, not the automatic basis for every use.
For healthcare AI, the institution should confirm its controller or processor role, purpose, and processing basis, then translate the law into controls for collection, access, security, retention, deletion, processors, and transfers. Article 34 requires a Data Protection Impact Assessment for high-risk processing and expressly includes processing specific personal data.