Does Indonesia have a post-quantum cryptography (PQC) law?

No. Nothing published for Indonesia carries statutory force for post-quantum cryptography as of this page's last review. What exists is non-binding guidance, set out with its primary sources below. The lead body is Badan Siber dan Sandi Negara (BSSN), Indonesia's national cyber and crypto agency.

What is Indonesia's PQC migration deadline?

None. No migration deadline has been published for Indonesia by any regulator we checked, including Badan Siber dan Sandi Negara (BSSN), Indonesia's national cyber and crypto agency.

Does Indonesia require a Cryptographic Bill of Materials (CBOM)?

No. No CBOM or cryptographic inventory requirement appears in any of the primary sources listed on this page.

IDGuidance

Indonesia

BSSN, Indonesia's national cyber and crypto agency, has formed a National Task Force for Post-Quantum Cryptography Migration Preparation and is drafting a national PQC migration roadmap, confirmed on the record by named senior BSSN and coordinating-ministry officials -- real institutional activity, but no roadmap, task-force charter, or draft regulation has been published yet, and a separately-cited BSSN cryptography regulation turns out to be unrelated to PQC.

Indonesia's post-quantum cryptography posture is classified as guidance, led by Badan Siber dan Sandi Negara (BSSN), Indonesia's national cyber and crypto agency. It scores 18/100 on this tracker's rubric, guidance only, with little binding force yet, and that is not a measure of how secure or advanced the country actually is.

What's verified

BSSN (Badan Siber dan Sandi Negara), Indonesia's national cyber and crypto agency, has formed a "Gugus Tugas Nasional Penyiapan Migrasi Post-Quantum Cryptography" (National Task Force for Post-Quantum Cryptography Migration Preparation), confirmed on the record by BSSN's Deputy for Cyber Security and Crypto Strategy and Policy, Marsda TNI R. Tjahjo Kurniawan, quoted in Koran Jakarta (11 August 2026):

"BSSN juga telah membentuk Gugus Tugas Nasional Penyiapan Migrasi Post-Quantum Cryptography." ("BSSN has also formed a National Task Force for Post-Quantum Cryptography Migration Preparation.")

A coordinating-ministry official, Kemenko Polkam Deputy for Communication and Information Coordination Marsda TNI Eko Dono Indarto, is quoted in the same article describing the effort's urgency:

"Soal Post-Quantum Cryptography, dunia bergerak jauh lebih cepat dari yang kita bayangkan. Kita harus mengejar dan membuat lompatan." ("On Post-Quantum Cryptography, the world is moving much faster than we imagined. We must catch up and make a leap.")

The article lists drafting a "Peta Jalan Nasional Migrasi Post-Quantum Cryptography (PQC)" (National PQC Migration Roadmap) as the first of four priority actions from this coordination effort. Separately, an independent account from a Technical Working Group participant (via komite.id) describes the task force's inaugural meeting on 25 June 2026 at BSSN headquarters in Bojongsari, corroborating that the task force is real and active.

What we checked and did not find

No BSSN-published primary document -- task-force charter, roadmap PDF, or draft Presidential Regulation text -- was found on bssn.go.id, jdih.bssn.go.id (BSSN's own legal database), bi.go.id, or ojk.go.id. A frequently-cited BSSN regulation, Peraturan BSSN No. 11 Tahun 2024 ("Penyelenggaraan Algoritma Kriptografi Indonesia dan Penilaian Kesesuaian Keamanan Modul Kriptografi"), was checked directly against its full text via independent mirrors and confirmed to be unrelated to PQC: it establishes Indonesia's general national cryptography-algorithm and module-certification scheme (based on the classical, pre-quantum standard SNI ISO/IEC 19790:2015), with zero occurrences of "kuantum," "pasca-kuantum," or "post-quantum" anywhere in the text. It should not be cited as PQC regulation. No Bank Indonesia or OJK circular addressing PQC has been published.

Score rationale

Each axis is scored 0–20 against the primary sources listed on this page. See the methodology for what each axis measures and how scores are derived.

Axis	Score	Why
Mandate strength	2/20	No binding document exists yet. The task force and roadmap are confirmed only via named officials' on-record statements to press, describing forthcoming work rather than an issued mandate.
Deadline concreteness	0/20	No target year or migration deadline has been published for the roadmap itself; officials describe the roadmap as a planned deliverable, not yet dated.
Scope of coverage	8/20	Per the coordinating-ministry deputy's public remarks, the effort is framed as a national, cross-agency undertaking (BSSN plus Kemenko Polkam coordination), suggesting an intended broad scope, though nothing has been formally scoped in writing yet.
Inventory/CBOM requirement	0/20	No cryptographic-inventory or CBOM requirement has been named in any officially attributed statement.
Regulatory activity	8/20	BSSN, Indonesia's named cryptography authority, has formed a real task force (inaugural meeting 25 June 2026) and two senior, titled officials have publicly committed to producing a national PQC migration roadmap -- genuine institutional activity, though it remains pre-publication.
Total	18/100	A blunt sum of the five columns to its left.

Related regulators

Sector bodies checked independently, not assumed from the primary source above.

Bank Indonesia / OJK (Otoritas Jasa Keuangan)
Not yet addressed, a gap to watch
No circular, regulation number, or roadmap document addressing post-quantum cryptography was located on bi.go.id or ojk.go.id.

FAQ: Indonesia and PQC

Does Indonesia have a post-quantum cryptography (PQC) law?: No. Nothing published for Indonesia carries statutory force for post-quantum cryptography as of this page's last review. What exists is non-binding guidance, set out with its primary sources below. The lead body is Badan Siber dan Sandi Negara (BSSN), Indonesia's national cyber and crypto agency.
What is Indonesia's PQC migration deadline?: None. No migration deadline has been published for Indonesia by any regulator we checked, including Badan Siber dan Sandi Negara (BSSN), Indonesia's national cyber and crypto agency.
Does Indonesia require a Cryptographic Bill of Materials (CBOM)?: No. No CBOM or cryptographic inventory requirement appears in any of the primary sources listed on this page.