Cross-border transfer of personal data is allowed if : - The destination country have an equal standard or level of personal data protection as Indonesia. -  If the first condition mentioned above is not met, the personal data controller (including private) is obliged to provide proper protection of personal data with a safeguard that is contractually binding.- If the first and second condition are not met, private data controller must get agreement from the personal data owner.