Data Center Investment in Indonesia 2026 Regulatory Guide

Data Center Investment in Indonesia: 2026 Regulatory Guide

  • InCorp Editorial Team
  • 25 September 2026
  • 11 minutes reading time

Data center investment in Indonesia is accelerating as AI adoption, cloud migration, and enterprise digitalization drive demand for secure, scalable digital infrastructure. As of July 2026, Indonesia had approximately 580 MW of operational data center capacity, with investors showing interest in developing an additional 1.3 GW, valued at an estimated USD 15–20 billion.

Entering this market profitably depends on getting the fundamentals right from day one: the correct PT PMA structure, KBLI classification, site selection, environmental approval pathway, and tax positioning. Investors who skip this sequencing may discover licensing gaps or siting problems only after capital has already been committed.

Key Takeaways

  • Foreign investors generally need a PT PMA to operate a data center, with an investment plan exceeding IDR 10 billion per five-digit KBLI per project location and minimum paid-up capital of IDR 2.5 billion per PT, under BKPM Regulation No. 5 of 2025.
  • Data center hosting and colocation activities fall under KBLI 63102 – Computer Infrastructure Supply, Hosting, and Related Activities under KBLI 2025. The activity is classified as medium-high risk and requires a Standard Certificate.
  • Indonesia’s Personal Data Protection Law does not impose a blanket data localization requirement. Different rules can apply depending on the electronic system and industry.
  • Data processing and hosting were included in Indonesia’s tax-holiday framework.
  • Jakarta remains Indonesia’s largest data center market, while Batam continues to grow as a Singapore-linked regional hub.

Indonesia Data Center Market at a Glance

MetricFigure
Operational capacity, July 2026~580 MW
Additional investor interest~1.3 GW
Estimated investment pipelineUSD 15–20B
Private installed-capacity estimate, 2026~1,717 MW
Private capacity forecast, 2031~4,145 MW
Jakarta operational capacity, H1 2026322 MW
Jakarta under construction / planned395 MW / 1,699 MW
Jakarta share of national installed capacity~55%

Government and commercial research sources use different definitions of operational, installed, under-construction, and planned capacity. The figures should therefore be read according to their respective methodologies rather than treated as directly comparable. Jakarta’s H1 2026 pipeline figures are supported by Cushman & Wakefield.

Why Indonesia is Attracting Data Center Investment

Demand is driven by four converging forces:

  • AI and cloud workload growth
  • Financial-sector and enterprise digital infrastructure demand
  • E-commerce expansion
  • Government and business digitalization

Indonesia’s internet penetration reached 81.72% in 2026, representing approximately 235 million internet users.

Danantara has also included data centers in its 2026 investment program, with approximately IDR 21 trillion allocated to a data center platform project with global operators.

Which Data Centre Locations Should Investors Consider?

The key data center locations in Indonesia are concentrated in Greater Jakarta, West Java, Batam, Surabaya, Bali, and selected emerging regions, each offering unique advantages. Understanding these can help investors feel more confident in selecting optimal sites aligned with their strategic goals.

LocationBest ForKey Advantage
Greater JakartaColocation, hyperscale campuses, financial servicesDeep enterprise demand and established connectivity
West Java (Bekasi, Cikarang, Karawang)Large-scale, multi-megawatt campusesIndustrial locations and proximity to Jakarta demand
BatamRegional hub, Singapore-linked demandProximity to Singapore and submarine cable connectivity
Surabaya / East JavaDisaster recovery, regional enterprise, edge nodesMajor manufacturing and logistics market
BaliSelected edge infrastructure and tourism technologyStrong tourism and international digital-user base

Site selection should go beyond location and land cost. Investors should assess power availability, zoning and spatial conformity, fiber connectivity, flood and natural-hazard exposure, environmental requirements, and future expansion capacity before committing land.

What Company Structure and Licenses Does a Data Center Need?

A foreign investor will generally establish a PT PMA. Under GR 28/2025 and BKPM Regulation No. 5 of 2025, the general investment plan must exceed IDR 10 billion per five-digit KBLI per project location, excluding land and buildings, and require a minimum paid-up capital of IDR 2.5 billion per PT.

The paid-up capital is subject to a 12-month retention commitment, but this should not be interpreted as the funds being completely frozen. Permitted uses during the period can include company investment and operational purposes in accordance with the regulation.

Hosting, cloud infrastructure, and data center colocation fall under KBLI 63102. The code expressly includes cloud infrastructure, hosting, server and network space rental in data centers, and electronic data storage.

A separate assessment may be needed where one entity owns or leases the data center property while another entity operates the hosting or colocation services. The KBLI and licensing requirements should align with the actual activities of each entity.

RequirementDetailAuthority
PT PMA + capital>IDR 10B investment per five-digit KBLI/project location; IDR 2.5B minimum paid-up capital per PTMinistry of Law + BKPM
KBLI 63102Hosting, cloud, computing infrastructure, and data center colocationBPS / OSS
OSS-RBA licensingMedium-high risk; NIB + verified Standard CertificateOSS / BKPM
Environmental approvalAMDAL / UKL-UPL / SPPL, as applicableEnvironmental authority
PSE registrationRequired where the operator meets Private-Scope PSE criteriaKomdigi
Building approvalsPBG and SLF, as applicableRelevant local authority

KBLI 63102 remains current following BPS Regulation No. 6 of 2026, which amended KBLI 2025 effective 10 September 2026 without changing this code.

GR 28/2025 also introduced clearer Service Level Agreements and fiktif positif mechanisms for eligible business licensing processes. For certain KKPR assessments, document assessment is limited to 20 working days once the documents are declared correct.

Does Indonesia Require Data Localization?

No—not as a general rule. Indonesia’s Personal Data Protection Law (Law No. 27 of 2022) doesn’t require all personal data to be physically stored in Indonesia. Cross-border transfers are permitted subject to the requirements under the law.

However, different requirements apply depending on the type of electronic system:

  • Public-Scope PSEs generally must manage, process, and/or store electronic systems and data in Indonesia, subject to regulatory exceptions.
  • Private-Scope PSEs may manage, process, and/or store electronic systems and data in Indonesia and/or overseas, provided regulatory supervision and law-enforcement access can be maintained.
  • Regulated sectors, particularly financial services, may face additional sector-specific requirements.

These distinctions are established under PP 71/2019. Data center operators and their tenants should therefore assess localization requirements based on the type of system, data, and industry involved, rather than assuming one rule applies to all data.

What Tax Incentives Apply to Data Center Investments?

Data processing, hosting, and related digital activities were included within Indonesia’s pioneer-industry tax-holiday framework.

However, PMK 69/2024 set December 31, 2025, as the deadline for submitting new proposals for the corporate income tax reduction under that framework.

For projects entering Indonesia in 2026:

  • Do not assume that a new tax-holiday application remains available under PMK 69/2024.
  • Projects with existing approvals should assess their applicable approval conditions.
  • Multinational groups should also consider Indonesia’s Global Minimum Tax rules when evaluating the value of existing tax incentives.

Investors should confirm the incentives currently available to their project before including them in financial projections.

What are the Key Risks Before Committing Capital?

Before committing capital, investors should assess the operational, licensing, and site-related risks that could delay development or increase project costs. Key areas to review include power, zoning, connectivity, environmental requirements, data compliance, and PSE obligations.

  • Power capacity: Confirm PLN capacity, redundancy, backup power, and future expansion requirements early.
  • Zoning: Confirm that the site and planned activity comply with the applicable spatial plan and KKPR requirements.
  • Fiber connectivity: Assess network availability and redundancy to minimize single points of failure.
  • Flood and natural-hazard exposure: Review official hazard information and site-specific engineering requirements.
  • Environmental requirements: Confirm whether AMDAL, UKL-UPL, or SPPL applies before committing to the site.
  • PSE registration: Confirm whether the operating entity qualifies as a Private-Scope PSE. Komdigi continues to enforce registration requirements, including issuing notices to 25 Private-Scope PSEs in September 2026.
  • Data governance: Review UU PDP, PP 71/2019, and applicable sector-specific requirements.
  • Renewable energy access: Assess renewable electricity options and RECs where required by tenants or ESG commitments.

Unresolved issues can lead to delayed go-live, additional costs, licensing problems, or capital being committed to an unsuitable site.

Data Center Indonesia Setup Checklist

Before setting up a data center in Indonesia, investors should confirm that the company structure, licensing, site, environmental, tax, and operational requirements are properly aligned. Use this checklist to identify the key areas that should be prepared before operations begin.

  • PT PMA established under the correct KBLI 2025 code(s).
  • Investment plan and paid-up capital aligned with PMA requirements.
  • Hosting and property activities separated where required by the business structure.
  • Site assessed for power, fiber, zoning, hazard exposure, and expansion capacity.
  • Environmental obligation mapped: AMDAL, UKL-UPL, or SPPL.
  • NIB and verified Standard Certificate pathway confirmed for KBLI 63102.
  • PSE registration requirement assessed.
  • Data localization and cross-border transfer requirements reviewed.
  • Current tax incentives assessed without assuming tax-holiday eligibility.
  • PBG and SLF requirements identified.
  • Tax, payroll, workforce, and immigration compliance prepared.
  • LKPM reporting schedule planned.

An early compliance review can identify gaps in KBLI classification, site requirements, environmental obligations, or corporate structure before they delay licensing or affect investment timelines.

Set Up Your Data Center in Indonesia with InCorp

Entering Indonesia’s data center sector means aligning company structure, KBLI classification, licensing, site selection, tax positioning, and workforce compliance before capital is committed.

InCorp Indonesia (an Ascentium Company) supports foreign investors with:

  • PT PMA Establishment: setting up the appropriate foreign-owned structure.
  • KBLI Classification Review: aligning business activities with the correct KBLI 2025 code.
  • OSS-RBA Licensing Support: preparing the applicable business licensing requirements under GR 28/2025.
  • Environmental Compliance Coordination: determining whether AMDAL, UKL-UPL, or SPPL applies.
  • Tax Structuring Support: assessing available tax incentives and tax exposure.
  • Ongoing Corporate Compliance: supporting tax, accounting, payroll, and LKPM reporting.

Companies with multi-entity structures, foreign shareholders, or complex hosting and property arrangements should assess the structure before submitting an OSS application.

Fill out the form below to assess your data center project’s structure, licensing pathway, and compliance requirements before committing capital. Book a free consultation. *

*T&C apply.

Frequently Asked Questions

What is the projected size of Indonesia’s data center market?

The market was valued at USD 2.81 billion in 2025 and is projected to reach USD 6.08 billion by 2031, at a CAGR of approximately 13.7%.

Which KBLI code applies to data center operations in Indonesia?

Foreign investors can generally engage in data center hosting activities (KBLI 63102) through a wholly foreign-owned PT PMA, subject to capital thresholds under BKPM Regulation No. 5 of 2025. Ownership treatment for real estate/building-only structures should be verified separately.

What are the PT PMA capital requirements for a data center?

Minimum investment plan: IDR 10 billion per five-digit KBLI per project location (excluding land and buildings). Minimum paid-up capital: IDR 2.5 billion, subject to a 12-month lock-up under BKPM Regulation No. 5 of 2025.

Why is Batam an attractive location for a data center?

Batam offers SEZ status with 100% foreign ownership, proximity to Singapore, lower land costs, and a government-backed push for digital infrastructure through Nongsa Digital Park.

What environmental approvals are required for a data center in Indonesia?

Requirements depend on project scale and environmental impact. Investors must assess whether their project requires AMDAL (full environmental impact assessment), UKL-UPL, or the simpler SPPL declaration, in coordination with the Ministry of Environment.

Does Indonesia require data centers to localize all data?

No. UU PDP does not impose a general localization requirement. Localization applies narrowly — to non-bank financial institutions under OJK Regulation No. 4 of 2021, and to strategic data held by Public Scope electronic system operators under GR 71/2019.

What is the minimum capital to set up a data center PT PMA?

 An investment plan exceeding IDR 10 billion per five-digit KBLI per location, and a minimum paid-up capital of IDR 2.5 billion, locked for 12 months, under BKPM Regulation No. 5 of 2025.

What tax incentives are available for data center investments?

Data centers are a pioneering sector under PMK 69/2024, eligible for up to a 100% corporate income tax reduction for 5–20 years on investments exceeding IDR 500 billion. Groups in scope of the Global Minimum Tax may face a domestic top-up tax that reduces the holiday’s net benefit.

How has GR 28/2025 changed data center licensing?

GR 28/2025 replaced GR 5/2021 and introduced a “deemed approval” mechanism: if authorities miss the statutory deadline (20 working days for KKPR), approval is automatically granted in OSS, reducing timeline uncertainty.

What happens if a data center company fails to register as a PSE?

Komdigi (formerly Kominfo) actively enforces PSE registration — including formal warnings issued to 25 operators in June 2026 — with access blocking as a consequence of non-compliance.

Verified by

Hotdo Nauli

Senior Legal & Delivery Manager at InCorp Indonesia

Hotdo heads the Legal and Delivery team at InCorp Indonesia, managing Product Registration, Legal Advisory, and Business Licensing. With over 8 years of experience, she focuses on compliance and integrity,... Read more

Get in touch with us.

Lead Form

What you’ll get

A prompt response to your inquiry

Knowledge for doing business from local experts

Ongoing support for your business

Disclaimer

The information is provided by PT. Cekindo Business International (“InCorp Indonesia/ we”) for general purpose only and we make no representations or warranties of any kind. We do not act as an authorized government or non-government provider for official documents and services, which is issued by the Government of the Republic of Indonesia or its appointed officials. We do not promote any official government document or services of the Government of the Republic of Indonesia, including but not limited to, business identifiers, health and welfare assistance programs and benefits, unclaimed tax rebate, electronic travel visa and authorization, passports in this website.