AI Regulation Tracker / Legislation in force
Indonesia's amended ITE Law (No. 1 of 2024) is the working legal backstop for AI-generated content
Indonesia has no AI-specific statute in force, so the Second Amendment to its Electronic Information and Transactions Law is the instrument to which liability for AI-generated content would attach. Any firm publishing AI content to Indonesian users is already inside its reach.
Indonesia is often described as a jurisdiction still waiting for its AI law. For working professionals, that framing is misleading. The country already has a binding instrument that governs AI-generated content, and it already applies. Law No. 1 of 2024, the Second Amendment to the Electronic Information and Transactions Law (Law No. 11 of 2008), is in force. Because no AI-specific statute has been promulgated, this amended ITE Law is the de-facto legal basis for liability when synthetic media or AI misuse causes harm to Indonesian users.
What the amendment actually did
The 2024 amendment reworked the core prohibited-acts provisions of the ITE Law, the articles numbered 27, 27A, 27B, 28, and 29, and the penalty articles that attach to them, 45, 45A, and 45B. It also added governance hooks aimed at platforms, including provisions touching digital identity and child protection. These are the levers police and prosecutors reach for when content, including AI-generated content, is alleged to be defamatory, indecent, threatening, or otherwise unlawful. The amendment is a general content-and-conduct statute that was updated for the modern platform era, not a bespoke technology law.
What it does not do
The amended ITE Law contains no article that names artificial intelligence, deepfakes, or synthetic media as such. There is no AI-specific offense, no watermarking mandate, and no risk-tier scheme inside it. Liability for AI-generated content is inferred: a deepfake that defames a person, or synthetic media used to deceive, would be addressed under the existing prohibited-acts articles as though a human had produced the same unlawful content. Legal commentary has mapped particular conduct to particular articles, for example associating authenticity-manipulation and defamation-style harms with specific provisions, but that mapping comes from analysts rather than from a clean statutory label. Professionals should treat the article-by-article attribution as commentary to be checked against the primary text, not as a settled AI code.
Why this is the instrument that bites today
The practical point is that the absence of a dedicated AI statute does not mean the absence of liability. It means the liability runs through this law. The prohibited-acts and penalty articles carry real criminal exposure, and the platform-governance hooks give regulators a takedown pathway. When Indonesia's Ministry of Communication and Digital eventually issues its planned AI-content-labeling rule, the reporting indicates its sanctions would route back through this same ITE framework rather than through a freestanding penalty regime. That makes the amended ITE Law both the current backstop and the enforcement spine for the AI rules still in the pipeline.
The cross-border reach
For a US firm, the reach is the part that matters. The ITE Law applies to content and platforms that reach Indonesian users regardless of where the content originates or where the operator sits. A US company publishing AI-generated material that is accessible to Indonesian audiences, or operating a platform that serves them, is within scope. This is the familiar extraterritorial pattern: the obligation attaches to the audience, not the server. It also previews the direction of Indonesian AI regulation, where a general liability statute does the work until sector rules and a dedicated framework catch up.
The operational conclusion is straightforward. Until an Indonesian AI statute is signed, the amended ITE Law is the rulebook for AI-generated-content risk in the country. Map deepfake, synthetic-media, and automated-content scenarios to its prohibited-acts and penalty articles, account for platform takedown exposure, and verify the specific article references against the official text before relying on any single mapping.
Frequently Asked Questions
What changed with Indonesia's AI-content liability rules?
Nothing AI-specific was enacted. Instead, Law No. 1 of 2024 amended the existing ITE Law, updating its prohibited-acts articles (27, 27A, 27B, 28, 29) and penalty articles (45, 45A, 45B) and adding platform-governance hooks. That amended statute, now in force, is what governs AI-generated-content liability because there is no separate AI law yet.
Who is affected by the amended ITE Law?
Any electronic-system operator, platform, publisher, or marketer whose content reaches Indonesian users, plus the lawyers and compliance teams advising them. It applies regardless of where the operator or content originates, so foreign firms serving Indonesian audiences are included.
Does the ITE Law have a specific article on deepfakes or AI?
No. There is no article that names AI or deepfakes. Prosecutors would apply the general prohibited-acts articles to unlawful AI-generated content. Commentators have mapped specific conduct to specific articles, but that mapping is analytical, not a labeled statutory AI provision, and should be verified against the primary text.
How does this connect to Indonesia's coming AI-labeling rule?
The planned Ministry of Communication and Digital rule on AI-content labeling is still in development. Reporting indicates its sanctions would route back through the ITE Law rather than a standalone penalty regime, which makes the amended ITE Law the enforcement backbone for AI rules that are not yet in force.
Sponsored Training
Browse the full AI Regulation News tracker
Informational analysis for working professionals, not legal advice. Confirm how any rule applies to your situation with qualified counsel.