flag

Indonesia

Last updated : January 29, 2026

Compare with other countries

Digital ID Overview

overview_background_image

Indonesia has a national digital ID ecosystem built around the electronic identity card (eKTP), introduced in 2011.[10] The Digital Population Identity (Identitas Kependudukan Digital, IKD) is now being implemented as a central component of the country’s digital public infrastructure and a gateway to many public services.[11] As stated above, the eKTP is mandatory for all residents in the country.[12] This framework is foundational, built on the population registry and the unique National Identification Number (Nomor Induk Kependudukan, NIK). It is increasingly being integrated into other digital public infrastructure layers such as payments and data exchange.[13]

eKTP is a biometric smartcard linked to the central population database and NIK. It has been rolled out to over 170 million residents and is used as the basis for multiple government and private-sector transactions.[14] Since May 2024, the government has introduced the Identitas Kependudukan Digital (IKD, Digital Population Identity), a smartphone-based digital ID application that digitizes the KTP, family card, birth certificate and other population documents for online identity verification and access to services.[15] From January 2026, the government has announced a change in document verification.[16] Scan results using third-party applications or ordinary cameras will no longer be automatically connected to the authentic verification system and the IKD application will be the only way to check the authenticity of ID documents.[17]

The eKTP and IKD are anchored in Indonesia’s population administration regime under the Law No. 23 of 2006 on Population Administration. This law designates the NIK and associated identity documents as the core means of population identification for public services.[18] The IKD acts as the digitalization of existing legal identity credentials, not as a separate parallel system, aiming to make these legal identity documents usable in digital interactions.[19]

Between 2011 and 2013, senior government officials and business persons were involved in a corruption case manipulating the e-KTP budget and awarding of contracts.[20]  It is estimated that the scheme resulted in the siphoning of roughly Rp 2.3 trillion (around US $170–173 million) in state funds through rigged tenders, mark-ups, and kickbacks to lawmakers and officials.[21] The case has become emblematic of systemic corruption in large-scale infrastructure and technology procurements, and has triggered ongoing trials, asset recoveries, and public debate about accountability in Indonesia’s digital-identity rollout.[22]

Indonesia’s digital ID is both foundational and functional in nature. It is foundational as it is derived from and linked to the National Civil Registration and Population Registry, is intended to uniquely identify all residents, and is used as the base credential for a wide range of unrelated services.[23] As a functional ID, eKTP/NIK and IKD are continuously being integrated for access to population administration services, education and health services, social assistance, financial transactions, government administration and police services, issuance of passports, driving licenses, taxpayer identification numbers, insurance policies and land certificates.[24]

Indonesia issues different population documents to citizens and non-citizens.[25] While the legal structure accommodates non-citizen residents, public digital ID initiatives are described as targeting citizens and are built on the citizen-focused population administration database.[26] Available sources provide limited clarity on whether refugees or stateless persons can obtain equivalent digital credentials.

Analysis by organizations like the UNHCR and NGOs emphasize that the mandatory use of NIK/eKTP risks excluding communities that face barriers to civil registration, including indigenous groups, undocumented persons and those at risk of statelessness.[27] The lack of eKTP/NIK leads to exclusion from government programs and public services, demonstrating that while the ID may not be formally required for access to every service, it is operationally indispensable.[28]

Law

law_background_image

Domestic law and policy

Indonesia’s digital ID ecosystem is governed mainly by population administration laws, the Law No. 11 of 2008 on Electronic Information and Transactions Law (as amended by Law No. 1 of 2024), and the Law No. 27 of 2022 on Personal Data Protection.[29] Law No. 23 of 2006, as amended by Law No. 24 of 2013, provides the legal basis for the national population database and the electronic ID card containing biometric data.[30] These laws empower the Ministry of Home Affairs to create a unified population database and store biometric elements for each registered resident.[31]

The new Digital Population Identity (IKD) policy replaces or complements the physical eKTP with a digital credential on smartphones.[32] The amended Electronic Information and Transactions Law (EIT) introduces digital identity used for authentication and access to services, with only licensed Electronic Certification Providers authorized to issue digital IDs and electronic certificates.[33] Electronic signature provisions require linkage to verified identity and cryptographic protections.[34]

There is no single statutory definition of digital identity, but policy documents describe IKD as digital population identity derived from national population data, and digital ID under the EIT framework as a unique number verified against civil registration records.[35]

Data Protection

Indonesia enacted the Personal Data Protection Law (PDP Law) in 2022, now the primary cross-sector framework governing processing of personal data, including digital ID.[36] The PDP Law applies to electronic and non-electronic processing and introduces safeguards such as, purpose limitation, data minimization, data subject rights, and security obligations. The Personal Data Protection Law No. 27 of 2022 covers biometric and other personal data in the eKTP and IKD systems.[37] 

Biometric data is classified as specific personal data subject to enhanced protection.[38] The PDP Law imposes a general obligation on controllers to implement appropriate technical and organizational security measures, including encryption where needed, but does not require encryption of all data in all contexts.[39] The PDP Law permits government access to digital ID data on legal and public interest grounds.[40] Population administration laws allow for the sharing of population data across government agencies towards public administration.[41]

Civil society organizations highlight privacy risks, function creep, and data breaches in the whole ID system in the country.[42] Surveillance concerns arise from documented procurement of intrusive spyware and migration-related biometric data sharing.[43] Access to public resources is often conditioned on possession of eKTP/NIK, creating risks of exclusion.[44]

​International Commitments

Indonesia is not party to any treaty specifically regulating digital ID. It participates in UN Legal Identity Agenda processes. UNHCR Executive Committee Conclusions emphasize access to documentation for stateless persons.[45] Indonesia has ratified ICCPR, ICESCR, CERD, CEDAW, CAT, CRC and CRPD, but has not ratified the 1951 Refugee Convention or the 1954 and 1961 Statelessness Conventions.[46] As a party to the CRC, it should be noted that the Committee on the Rights of the Child, in its General Comment No. 25 states that digital systems should be created such that they enable all children to safely access essential digital public services and educational services without discrimination.[47]

The ASEAN Framework on Personal Data Protection and Framework on Digital Data Governance sets out non-binding principles encouraging member states to adopt national data protection laws and supports mutual recognition, but does not impose binding commitments or specific mandates on digital ID systems or make provisions for the protection of stateless persons.[48] The country has also pledged in 2025 to the Ministerial Declaration on a Decade of Action for Inclusive and Resilient Civil Registration and Vital Statistics in Asia and the Pacific where countries pledged to ensure that every birth is registered by 2030 and to close registration gaps among marginalized populations.[49] The Declarations highlight the barriers faced by stateless persons in accessing civil registration services and pledged to  ‘develop and implement measures to avoid the potential exclusion of digitally marginalized or vulnerable populations from statistical data and facilitate their access to services and entitlements’.[50]

Designed to Include?

The Impact of Digital ID and Legal Identity on Citizenship and Nationality Rights

background_image

Indonesia’s digital ID has largely reinforced existing documentation-based exclusion and has not been used as a tool to resolve statelessness. The grant of a NIK/eKTP is dependent on recognition in the population registry and, for Indonesians, reflects but does not constitute citizenship. Statelessness typically precedes the absence of digital ID.

Evidence shows strong exclusion from services due to lack of NIK/eKTP, affecting access to education, healthcare, social assistance, employment and political participation. During COVID-19 vaccination, NIK requirements excluded undocumented communities.[51] Without legal identity documents (birth certificates, KTP/eKTP), people struggle to access public education, healthcare and national health insurance, social assistance and poverty-targeted benefits, formal employment and labor protections. 

UNHCR has identified that stateless persons in Indonesia face administrative barriers to civil registration.[52] Civil society reports shows difficulty accessing services due to lack of KTP, with few systematic alternatives.[53]

Taken together, increasing reliance on NIK-linked digital ID, combined with non-ratification of statelessness treaties and absence of a legal statelessness category, creates a high-risk environment where persons at risk of statelessness are effectively denied enjoyment of rights guaranteed under Indonesia’s ratified human rights treaties.

References
1.^

 Shintya Theffidy, Muhammad Burhan and Lusita Anjelina, ‘The Dynamic of Inhabitant Identity Card Policy of Indonesia in 2006-2018’ Proceedings of the 2nd International Conference on Fundamental Rights,  I-COFFEES 2019, 5-6 August 2019, Bandar Lampung, Lampung, Indonesia (EAI 2021) <http://eudl.eu/doi/10.4108/eai.5-8-2019.2308645> accessed 09 January 2026; Law No. 23 of 2006 on Population Administration 2006; Law No. 24 of 2013 on Population Administration 2013.

2.^

 Law No. 12 of 2006 on  Cititzenship of the Republic of Indonesia 2006.

3.^

 Law No. 23 of 2006 on Population Administration; Law No. 24 of 2013 on Population Administration; Theffidy, Burhan and Anjelina (n 1).

4.^

 Office of Assistant to Deputy Cabinet Secretary for State Documents & Translation, ‘Permanent Residence Permit Holders Must Have E-KTP, Yet Not Eligible to Vote’ (Sekretariat Kabinet Republik Indonesia, 27 February 2019) <https://setkab.go.id/en/permanent-residence-permit-holders-must-have-e-ktp-yet-not-eligible-to-vote/> accessed 13 January 2026; Law No. 23 of 2006 on Population Administration; Law No. 24 of 2013 on Population Administration.

5.^

 Editor KAI, ‘Ketentuan Hukum Soal KTP Elektronik Bagi WNA Di Indonesia’ (Kongres Advokat Indonesia, 1 March 2019) <https://www.kai.or.id/berita/14613/ketentuan-hukum-soal-ktp-elektronik-bagi-wna.html> accessed 09 January 2026.

6.^

 Law No. 23 of 2006 on Population Administration; Law No. 24 of 2013 on Population Administration.

7.^

 ‘Registration of Births and Deaths in Indonesia’ (UNHCR Indonesia) <https://help.unhcr.org/indonesia/assistance-and-support/registration-of-births-and-deaths-in-indonesia/> accessed 09 January 2026.

8.^

 ibid; Regulation No. 96 of 2018 on Requirements and Procedures for Population Registration and Civil Registraion 2018.

9.^

 Verihubs, ‘Cara Bikin KTP Baru, Lengkap Dengan Syarat Dan Prosesnya | Verihubs’ <https://verihubs.com/blog/cara-bikin-ktp-syarat-proses> accessed 15 January 2026.

10.^

 Zainudin, ‘Digital ID Policy in Support of Digital Transformation in Indonesia’ (2025) 17 Journal of Home Affairs Governance 1; ‘Indonesia Advances Digital Transformation with Plans for Digital ID Access to Public Services | Digital Watch Observatory’ (1 March 2024) <https://dig.watch/updates/indonesia-advances-digital-transformation-with-plans-for-digital-id-access-to-public-services> accessed 13 January 2026.

11.^

 Zainudin, ‘Digital ID Policy in Support of Digital Transformation in Indonesia’ (2025) 17 Journal of Home Affairs Governance 1; Steve Kaaru, ‘Indonesia Invests in Digital ID, AI to Boost Economy’ (CoinGeek, 26 December 2025) <https://coingeek.com/indonesia-invests-in-digital-id-ai-to-boost-economy/> accessed 09 January 2026; ‘Indonesia Advances Digital Transformation with Plans for Digital ID Access to Public Services | Digital Watch Observatory’ (1 March 2024) <https://dig.watch/updates/indonesia-advances-digital-transformation-with-plans-for-digital-id-access-to-public-services> accessed 09 January 2026.

12.^

 Office of Assistant to Deputy Cabinet Secretary for State Documents & Translation (n 4).

13.^

 Aswin Rivai, ‘Akselerasi Inklusi Keuangan Dengan Infrastruktur Publik Digital’ (Antara News, 7 August 2025) <https://www.antaranews.com/berita/5021505/akselerasi-inklusi-keuangan-dengan-infrastruktur-publik-digital> accessed 09 January 2026; Zainudin (n 9).

14.^

 Zainudin (n 10).

15.^

 Dinda Amanda, Muhammad Rizky Febrianto and Moh Sutarjo, ‘Optimization Strategy for Digital Population Identity Applications’ (2025) 13 <https://ijcrt.org/papers/IJCRT2507150.pdf>; Kompas Cyber Media, ‘Dirjen Dukcapil: IKD Berlaku mulai Mei 2024’ (KOMPAS.com, 27 March 2024) <https://www.kompas.com/tren/read/2024/03/27/121500365/dirjen-dukcapil--ikd-berlaku-mulai-mei-2024> accessed 15 January 2026.

16.^

 Pemerintah Kota Tangerang, ‘Mulai Januari 2026, Verifikasi Dokumen Kependudukan Wajib Menggunakan Aplikasi IKD’ <https://www.tangerangkota.go.id/berita/detail/60391/mulai-januari-2026-verifikasi-dokumen-kependudukan-wajib-menggunakan-aplikasi-ikd> accessed 15 January 2026.

17.^

ibid

18.^

 Law No. 23 of 2006 on Population Administration; Law No. 24 of 2013 on Population Administration.

19.^

 Zainudin (n 10); Ananda Dwi Firdaus and Sri Wibawani, ‘Innovation of Digital Identity Application (IKD) in Improving Public Services in Gujung Anyar Urban Village’; Amanda, Febrianto and Sutarjo (n 15).

20.^

 Humas FHUI, ‘Annotation of the Corruption Case Decision on Electronic Citizen Identity Card (e-KTP), This Is the Result’ (Fakultas Hukum Universitas Indonesia, 16 October 2018) <https://law.ui.ac.id/v3/annotation-of-the-corruption-case-decision-on-electronic-citizen-identity-card-e-ktp-this-is-the-result/> accessed 28 January 2026; ‘Tyrany of Secrecy, the e-KTP Mega-Corruption Case Money, Power and Greed’ (OBSERVER, 30 March 2018) <https://observerid.com/tyrany-of-secrecy-the-e-ktp-mega-corruption-case-money-power-and-greed/> accessed 28 January 2026; Stefanus Ato and others, ‘Setya Novanto, Paulus Tannos, and the e-KTP Scarcity Episode’ (Kompas.id, 23 August 2025) <https://www.kompas.id/artikel/en-setya-novanto-paulus-tannos-dan-episode-kelangkaan-ktp-el> accessed 28 January 2026.

21.^

 FHUI (n 20); Stefanus Ato and others (n 20); ‘Tyrany of Secrecy, the e-KTP Mega-Corruption Case Money, Power and Greed’ (n 20).

22.^

 ‘E-evidence in Indonesia: A new frontier in anti-corruption’ (IDLO - International Development Law Organization, 5 September 2017) <https://www.idlo.int/fr/news/highlights/e-evidence-indonesia-new-frontier-anti-corruption> accessed 28 January 2026.

23.^

 Zainudin (n 10); ‘Indonesia Advances Digital Transformation with Plans for Digital ID Access to Public Services | Digital Watch Observatory’ (n 10).

24.^

 Kaaru (n 11); ‘Indonesia Advances Digital Transformation with Plans for Digital ID Access to Public Services | Digital Watch Observatory’ (n 10); Aswin Rivai (n 13).

25.^

 ‘Visas and Documentation - Information on Working Documents for Expatriates in Indonesia’ <https://www.expat.or.id/info/docs.html> accessed 09 January 2026.

26.^

 Zainudin (n 10).

27.^

 UNHCR, ‘Submission by the United Nations High Commissioner for Refugees, Universal Periodic Review: Fourth Cycle, 41st Session - Indonesia’ <https://upr-info.org/sites/default/files/country-document/2022-10/UNHCR_UPR41_IDN_E_Main_0.pdf>; ‘Baseline Research: Mapping the Situation of Persons at Risk of Statelessness in Indonesia’ (SUAKA, Human Rights Working Group 2023) <https://suaka.or.id/wp-content/uploads/2023/05/Mapping-the-Situation-of-Persons-at-Risk-of-Statelessness-in-Indonesia.pdf>.

28.^

 UNHCR, ‘Submission by the United Nations High Commissioner for Refugees, Universal Periodic Review: Fourth Cycle, 41st Session - Indonesia’ (n 27); ‘Baseline Research: Mapping the Situation of Persons at Risk of Statelessness in Indonesia’ (n 27).

29.^

 Global Legal Group, ‘International Comparative Legal Guides’ (International Comparative Legal Guides International Business Reports) <https://iclg.com/practice-areas/data-protection-laws-and-regulations/indonesia> accessed 09 January 2026; Rohin Pujari, ‘Indonesia - The Revamped Electronic Information And Transaction Law .’ (Conventus Law, 27 February 2024) <https://conventuslaw.com/report/indonesia-the-revamped-electronic-information-and-transaction-law/> accessed 09 January 2026; ‘Electronic Information And Transactions Law In Indonesia – An Update’ <https://www.mondaq.com/technology/1436046/electronic-information-and-transactions-law-in-indonesia-an-update> accessed 09 January 2026; ‘Data Protection Laws in Indonesia - Data Protection Laws of the World’ (DLA Piper) <https://www.dlapiperdataprotection.com/index.html?t=law&c=ID> accessed 09 January 2026.

30.^

 Law No. 23 of 2006 on Population Administration; Law No. 24 of 2013 on Population Administration.

31.^

 Law No. 23 of 2006 on Population Administration; Law No. 24 of 2013 on Population Administration.

32.^

 ‘How Identity Verification Systems Support Indonesia’s Digital Public Infrastructure’ <https://govinsider.asia/intl-en/article/how-identity-verification-systems-support-indonesias-digital-public-infrastructure> accessed 09 January 2026; ‘Indonesia’s New Digital ID Aims to Make It Easier for Citizens to Access Public Services’ <https://govinsider.asia/intl-en/article/indonesias-new-digital-id-aims-to-make-it-easier-for-citizens-to-access-public-services> accessed 09 January 2026.

33.^

 ‘Indonesia Digital Identity Signature’ <https://www.esignglobal.com/news-center/detail/11668> accessed 09 January 2026; ‘Is an Electronic Signature Legally Valid in Indonesia under UU ITE?’ <https://www.esignglobal.com/news-center/detail/13717> accessed 09 January 2026; SSEK Admin, ‘Legal Update: Indonesia Takes Big Step Forward with New Revision of Electronic Information and Transactions Law’ (SSEK Law Firm, 17 January 2024) <https://ssek.com/blog/legal-update-indonesia-takes-big-step-forward-with-new-revision-of-electronic-information-and-transactions-law/> accessed 09 January 2026.

34.^

 ‘Indonesia Digital Identity Signature’ (n 33); ‘Is an Electronic Signature Legally Valid in Indonesia under UU ITE?’ (n 33); Admin (n 33).

35.^

 ‘Indonesia’s New Digital ID Aims to Make It Easier for Citizens to Access Public Services’ (n 32); ‘How Identity Verification Systems Support Indonesia’s Digital Public Infrastructure’ (n 32).

36.^

 Indra Allen and others, ‘Data. Protection. Adding Value. Personal Data Protection Law - Indonesia’ PWC; Group (n 29); ‘Data Protection Laws in Indonesia - Data Protection Laws of the World’ (n 29).

37.^

 ‘Introductory to Indonesia’s Newly Enacted Personal Data Protection Law’ (ARMA Law) <https://www.arma-law.com/news-event/newsflash/ruu-pdp-introductory-to-indonesias-newly-enacted-personal-data-protection-law> accessed 09 January 2026; ‘Indonesia’s Personal Data Protection Bill: Overview, Key Takeaways, and Context’ <https://fpf.org/blog/indonesias-personal-data-protection-bill-overview-key-takeaways-and-context/> accessed 09 January 2026; ‘Data Protection Laws in Indonesia - Data Protection Laws of the World’ (DLA Piper) <https://www.dlapiperdataprotection.com/index.html?t=law&c=ID> accessed 09 January 2026.

38.^

 ‘Indonesia’s Personal Data Protection Bill: Overview, Key Takeaways, and Context’ (n 29); ‘Indonesia’s Personal Data Protection (PDP) Law | Fortra’s Digital Guardian’ <https://www.fortra.com/compliance/pdp-law> accessed 09 January 2026; ‘PDP Law of Indonesia Requirements’ (25 November 2025) <https://cpl.thalesgroup.com/blog/identity-data-protection/pdp-law-indonesia-requirements> accessed 09 January 2026.

39.^

 InCorp Editorial Team, ‘Requirements for Personal Data Protection Law in Indonesia’ (InCorp) <https://indonesia.incorp.asia/blogs/personal-data-protection/> accessed 09 January 2026; ‘Indonesia’s Personal Data Protection (PDP) Law | Fortra’s Digital Guardian’ (n 30); ‘PDP Law of Indonesia Requirements’ (n 30).

40.^

 CMSpro, ‘Indonesia’s Personal Data Protection Law: Prepare for the Coming Implementation Regulation (2) =Cross Border Transfer= | One Asia Lawyers’ (One Asia Lawyers | One Asia Lawyers, 15 November 2023) <https://oneasia.legal/en/6148> accessed 09 January 2026; Agus Ahadi Deradjat and others, ‘Data Protection in Indonesia: Overview’ A w; ‘Data Protection Laws in Indonesia - Data Protection Laws of the World’ (n 21).

41.^

 Deradjat and others (n 40).

42.^

 ELSAM and Access Now, ‘The Right to Privacy in Indonesia - Stakeholder Report Universal Periodic Review, 41st Session’ <https://www.accessnow.org/wp-content/uploads/2022/04/ELSAM-and-Access-Now-UPR-Joint-Submission-on-the-Right-to-Privacy-in-Indonesia.pdf>.

43.^

ibid

44.^

ibid

45.^

 UNHCR, ‘Conclusion No. 111 (LXIV): Civil Registration - Adopted by the Executive Committee (2013)’ (Refworld, 2013) <https://www.refworld.org/policy/exconc/excom/2013/en/18494> accessed 15 January 2026; UNHCR, ‘UNHCR Executive Committee Conclusions Related to Statelessness’ (Refworld) <https://www.refworld.org/policy/polcomp/unhcr/2010/en/74057> accessed 15 January 2026.

46.^

 OHCHR, ‘UN Treaty Body Database’ <https://tbinternet.ohchr.org/_layouts/15/TreatyBodyExternal/Treaty.aspx?CountryID=20&Lang=EN> accessed 20 November 2025.

47.^

 ‘General Comment No. 25 (2021) on Children’s Rights in Relation to the Digital Environment’ <https://www.unicef.org/bulgaria/en/media/10596/file>.

48.^

 ASEAN TELMIN, ‘Framework on Personal Data Protection’ (2016) <https://cil.nus.edu.sg/wp-content/uploads/2020/08/2016-Frmwk-PDP.pdf>; ASEAN TELMIN, ‘Framework on Digital Data Governance’ (2018) <https://cil.nus.edu.sg/wp-content/uploads/2020/09/2018-Framework-Digital-Data-Governance.pdf>.

49.^

 ‘Asia-Pacific Nations Reaffirm Commitment to Legal Identity for All at Third Ministerial Conference on Civil Registration and Vital Statistics | Get Every One in the Picture’ <https://crvs.unescap.org/news/asia-pacific-nations-reaffirm-commitment-legal-identity-all-third-ministerial-conference-civil> accessed 7 November 2025.

50.^

 UNESCAP, ‘Ministerial Declaration on a Decade of Action for Inclusive and Resilient Civil Registration and Vital Statistics in Asia and the Pacific’ (2025) ESCAP/MCCRVS/2-25/6/Add.1 <https://www.unescap.org/sites/default/d8files/event-documents/2500197E_ESCAP_MCCRVS_2025_6_Add1_Ministerial_Declaration.pdf?_gl=1*vdnplp*_ga*NTMxNDc5Mjc4LjE3NjIzMjk2NDg.*_ga_SB1ZX36Y86*czE3NjIzMjk2NDckbzEkZzEkdDE3NjIzMzA1MDgkajI3JGwwJGgw>.

51.^

 UNHCR, ‘Submission by the United Nations High Commissioner for Refugees, Universal Periodic Review: Fourth Cycle, 41st Session - Indonesia’ (n 27).

52.^

ibid

53.^

 ‘Baseline Research: Mapping the Situation of Persons at Risk of Statelessness in Indonesia’ (n 27).

See Statelessness Overview
Footer design