Indonesia's Ministry of Communication and Digital Affairs (Komdigi) has moved a long-dormant compliance rule back into live enforcement. On June 26, 2026, the ministry notified 25 privately-operated digital platforms — 15 foreign, 10 domestic, covering 57 distinct websites and apps — that they had failed to register as Electronic System Operators (Penyelenggara Sistem Elektronik, or PSE), and gave them until July 3 to fix it. Only three complied: Strava, the Six Senses hospitality brand, and a domestic sports-community app. On July 8, Alexander Sabar, Komdigi's Director General of Digital Space Oversight, issued written warnings to the remaining 22, setting a final deadline of July 13, 2026 before the ministry moves to "pemutusan akses" — access blocking (komdigi.go.id notice; Antara).
The list is a strange assortment for a national security instrument: Qatar Airways, Qantas, ANA, Accor's Raffles and Pullman brands, Best Western, Banyan Tree, Barceló, The Ascott Limited, and several domestic hotel groups, alongside education platforms Kodland and Stimuler. It reads less like a crackdown on bad actors than a routine paperwork sweep that happens to carry a blocking penalty.
The rule, and why it exists
The legal basis is Peraturan Menteri Komunikasi dan Informatika No. 5/2020 ("Permenkominfo 5/2020"), which has required private-sector electronic system operators — e-commerce, fintech, paid digital content, messaging and social platforms, search engines, and any foreign service reaching Indonesian users — to register with the ministry since it took effect in 2021. Article 7 empowers the ministry to issue warnings and, ultimately, order access blocking for operators that ignore registration duties (jdih.komdigi.go.id, official regulation text).
The steelman case for this regime is real. Indonesia has 280 million people and one of the world's largest and fastest-growing digital economies, and its regulator has legitimate reasons to know which entities are processing its citizens' data, which platforms carry moderation and law-enforcement-cooperation obligations, and which foreign firms are earning revenue in the country without any registered legal presence to serve as a point of accountability. A registry is also, in principle, less restrictive than a licensing regime that requires pre-approval to operate — registration only asks operators to identify themselves after the fact.
But the enforcement history argues for proportion, not zeal
The problem is not the registry itself; it's the reflexive use of blanket blocking as the sanction of first resort, applied uniformly to a Wikimedia login page and a hotel booking widget alike. Komdigi has form here. In July 2022, when an earlier PSE deadline lapsed, the ministry blocked Steam, Epic Games Store, Origin, Yahoo, and PayPal outright — then apologized within days once public backlash made clear the blocking had swept up services Indonesians actually depended on (Tribunnews). More recently, the ministry gave the Wikimedia Foundation a series of extensions between November 2025 and January 2026, then, when Wikimedia missed a further deadline, partially blocked auth.wikimedia.org on February 25, 2026 — disabling login access for Indonesian contributors to the world's largest reference work over a registration lapse, not a content violation (Antara).
That history is what makes the current 22-platform list worth watching rather than dismissing as bureaucratic theater. Komdigi has shown twice this cycle that it will follow through on blocking rather than let deadlines lapse quietly, and the sanction — full access termination — is identical whether the target is a search engine used by millions or an airline booking page used by travelers checking in. A registration failure and a genuine trust-and-safety failure should not draw the same administrative remedy.
What proportionate enforcement would look like
A registry requirement that scales its penalty to the platform's actual footprint and risk profile would serve Komdigi's stated goal — "orderly and responsible digital governance," in Sabar's words — without the collateral damage of blocking a hotel chain's website or a nonprofit's login page. Options within reach: a graduated-fine ladder before blocking, a public grace period for platforms that respond to outreach in good faith (as three already did), and a narrower, service-specific block instead of the current all-or-nothing access cut extended even to informational platforms. Komdigi already offers technical assistance via WhatsApp, email, and Zoom to firms struggling with the process, which suggests the ministry itself recognizes friction, not defiance, is often the real obstacle.
If the July 13 deadline passes and Komdigi again reaches for full blocking as the default instrument, Indonesia will have reaffirmed a pattern that costs it real economic and reputational goodwill for a registry violation that a fine or a narrower service restriction could resolve just as effectively.