Why this matters now
On 16 July 2026 the Indonesian government issued Government Regulation (PP) No. 33 of 2026, the implementing regulation for the Personal Data Protection Law (UU PDP). It takes effect on 16 January 2027, so businesses have about two months left to prepare.
On 6 November 2026, the Ministry of Communication and Digital Affairs (Komdigi) said the draft Presidential Regulation that sets up the data protection authority is final and has been submitted to the President, although there is no date yet for when the authority will start work. In the same report, Komdigi said it is examining a suspected personal data protection failure that a coffee chain reported on 28 October 2026. Personal data is in the news, and event agencies hold a lot of it.
What data an event agency usually holds
Count the data that passes through an agency for a single event:
- A photo of the ID card (KTP) or the ID number (NIK), for contracts and payment.
- A bank account or e-wallet number, for pay.
- WhatsApp number and address.
- Profile photo, full-body photo, height, and uniform size.
- Selfie and location at check-in.
- Event and pay history.
The PDP Law puts personal financial data and biometric data in the group of specific personal data. In practice, a talent's bank details need more care than a name and phone number.
Five things to prepare before 16 January 2027
- Write down what data you collect, why, and who can see it. PP 33/2026 asks data controllers to keep a record of their processing activities. A simple table per type of data is a good start.
- Ask for consent separately and keep proof. When consent is the legal basis, it must be free, specific, and unambiguous. Consent bundled with general terms and conditions may be considered ambiguous. Tell talent what data you ask for and why before they agree.
- Limit who holds the data. Avoid posting ID card photos or bank numbers in the event's WhatsApp group. A client usually only needs the name, profile photo, and role, not identity documents.
- Decide how long you keep data. PP 33/2026 requires a written retention policy. Decide when ID card photos and check-in selfies are deleted once pay and tax matters are settled.
- Plan what to do if data leaks or is lost. The PDP Law requires written notice within 3 x 24 hours to the people affected and to the authority when a personal data protection failure happens. According to PwC Indonesia's summary, PP 33/2026 also counts data that is lost, damaged, or cannot be accessed as a failure, not only data that leaks. Decide now who gets contacted and who writes the notice.
PP 33/2026 also sets administrative sanctions, from a written warning up to a fine of at most 2% of annual revenue or income. For a small agency, the nearer risk is usually trust: talent who feel their data was not looked after may not want to work with the same agency again.
How Temu Talent handles talent data
If an agency runs its events on Temu Talent, the system already covers some of the points above:
- The ID number and bank account used for payout verification are encrypted before they are stored. Apart from Admin, users only see the last four digits.
- Check-in selfies are kept in private storage. Only the talent, Admin, the agency running the event, and a client on an event where the client approves attendance directly can open them.
- Photo metadata, including the GPS location cameras usually record, is removed when a photo is uploaded.
These features help, but they do not replace an agency's own policy. Data you keep outside the system, for example on a coordinator's phone or in a spreadsheet, is still the agency's responsibility.
Note
This article is a practical summary, not legal advice. For the obligations that apply to your business, including whether you must appoint a data protection officer, ask a legal adviser.
Sources: PwC Indonesia on PP 33/2026, Hukumonline Pro, detikInet, 6 November 2026 (Indonesian), and the text of Law No. 27 of 2022 at Komdigi's legal database (Indonesian).
Want to manage event crew and attendance in one place? Introduce your agency to Temu Talent.
