Advising on Corporate Criminal Liability, Anti-Corruption, PDP Law Compliance and Investigations
Regulatory compliance in Indonesia is shaped by enforcement trends, anti-corruption requirements and data protection obligations under the PDP Law, often with cross-border implications. Nusantara DFDL Partnership advises on compliance frameworks, internal investigations and enforcement matters, and works with the DFDL network on regional as well as domestic coordination whenever required.
Compliance obligations in Indonesia arise from a broad regulatory framework, including anti-corruption laws, corporate governance standards and data protection requirements under the PDP Law.
Businesses are increasingly subject to regulatory scrutiny, including enforcement actions, whistleblower reports and internal misconduct risks, which may extend across jurisdictions.
We advice across the lifecycle of compliance matters, including risk assessment, framework design, internal investigations and enforcement-related issues.
Authority enquiries require controlled disclosure, consistent messaging and procedural discipline. Nusantara DFDL assists with response strategy, submissions, interviews and enforcement defence before sanctions escalate.
Helping companies manage whistleblower reports, retaliation risks, investigation triggers and escalation protocols, while keeping confidentiality, employment exposure and governance responsibilities properly aligned from intake onward.
Transaction diligence should test more than ownership and contracts. Reviewing sanctions, beneficial ownership, licences, litigation, ABC red flags and AML concerns helps avoid inherited liability.
For regional matters, evidence, privilege and authority engagement must be coordinated across jurisdictions. The broader DFDL’s platform helps align Indonesian investigation strategy with wider group-level exposure.
Different sectors face different pressure points, from OJK conduct rules to PPATK reporting, healthcare interactions or technology data controls. Advisory support turns regulation into workable controls.
Building compliance frameworks around board oversight, reporting lines, SOPs, approval controls and regulator expectations helps companies prevent issues before KPK, OJK or sector scrutiny begins.
Advising on gifts, facilitation payments, third-party risks, sponsorships and public official interactions, with controls aligned to Indonesia’s gratification rules and anti-bribery enforcement environment.
Our practice regularly supports global investors across a broad range of industries. Recent experience includes:
Sri Wahyu Ningsih
Partner
Sri Wahyu Ningsih advises multinational corporations, domestic companies and financial
institutions on regulatory, compliance, and cross-border regulatory strategies.
Practice Areas: Compliance & Investigations | Employment | Corporate and M&A
SPEAK WITH Sri Wahyu NingsihBribery, supply chain transparency, ESG-related disclosures, heightened data privacy regulations under the PDP Law all give rise to potential risks relating to compliance.
Approvals often involve the Ministry of Law and Human Rights, sector-specific regulators (like OJK or BPKM), and potentially the competition authority (KPPU) depending on transaction size and impact.
Early engagement of legal counsel is important to oversee document preservation, manage communications with authorities and maintain legal privilege.
Yes, post-merger notifications are required to the KPPU if specific asset or sales turnover thresholds are met. Mandatory notification must be made within 30 business days of the transaction becoming legally effective.
A structured review of counterparties to identify compliance risks, including regulatory exposure and potential reputational issues.
Yes. Regulatory breaches may result in enforcement action, financial penalties and subsequent civil or criminal proceedings.
