Indonesia Enacts Landmark Child Protection Regulation for Online Platforms

As of March 1, 2026, the Indonesian government has officially implemented Government Regulation No. 17 of 2025, popularly known as PP Tunas (Tata Kelola Penyelenggaraan Sistem Elektronik dalam Perlindungan Anak). This landmark regulation establishes a rigorous new standard for how digital platforms must protect children under 18 years of age.

Closing the Digital Gap

PP Tunas arrives as authorities warn of a “Digital Recruitment Shift” in trafficking. Recent data shows that 97% of trafficking victims in Indonesia are women and children, with many being targeted via social media job scams or “illegal adoption” groups.

Key Mandates of PP Tunas

• Age Verification: Platforms are now required to implement “age inferential” technology to accurately identify underage users.
• Parental Consent: For children under 17, Electronic System Providers (ESPs) must obtain explicit consent from parents or guardians within a 24-hour window before granting access.
• Privacy by Default: Minors must automatically be assigned the highest privacy settings, and platforms are strictly prohibited from profiling children for commercial gain.
• Penalties: Companies that fail to comply face administrative fines, temporary suspension, or total blocking of their services in Indonesia.

A Foundation for the Digital Economy

Minister of Communication and Digital Affairs, Meutya Hafid, emphasized that this regulation is a strategic choice for the nation. “Digital innovation should not come at the cost of our children’s safety,” she stated. The regulation similarly addresses emerging threats like Online Scamming Syndicates, ensuring that graduates and teenagers are protected from fraudulent overseas recruitment.

Protecting Vulnerable Children

By integrating these new standards, Indonesia aims to protect its estimated 4 million neglected and vulnerable children, ensuring they no longer remain “invisible” in the digital landscape.

Enforcement and Compliance Sanctions

To ensure these protections are strictly upheld, the government has established a layered enforcement framework for all Electronic System Providers (ESPs). Companies found in violation of PP Tunas mandates, including the failure to secure parental consent within the mandatory 24-hour window, will be subject to heavy administrative sanctions. Initial non-compliance will result in significant financial fines and formal warnings. If the violation persists or is deemed severe, the government will move to temporarily suspend the platform’s operations. For entities that fail to rectify their systems or repeatedly endanger minors, the Ministry reserves the right to implement a total block of their services within Indonesian territory, ensuring that corporate interests never supersede child safety.

Government Regulation No. 17 of 2025, also known as “PP Tunas”, became effective on April 1, 2025, as one of the implementing regulations of the EIT Law (Law No. 11 of 2008 on Electronic Information and Transaction, as amended) and the regulation related to the PDP Law (Law No. 27 of 2022 on Personal Data Protection) .

Under GR 17/2025, a “Child” or “Children” is defined as any person under the age of 18. The regulation applies to all public and private PSE which provides products, services and/or features that are intended for children use and/or can be accessible by children, including registered international PSEs .