Indonesia's Financial Services Authority (OJK) has launched cybersecurity and cyber resilience guidelines for online lending providers, alongside the signing of an integrity pact between providers and debt collection companies on collection ethics and consumer protection. These measures address operational and conduct risks, while OJK's earlier voluntary credit insurance support program, launched in December 2025, focused on protecting lenders against credit risk.
The guidelines emphasize the ability to anticipate, detect and respond to cyber incidents and restore services rapidly, rather than focusing solely on preventing attacks. A self-assessment tool helps providers measure cybersecurity maturity, identify weaknesses and develop measurable improvements. Implementation is proportional to each provider's scale, complexity and risk profile, with active involvement expected from boards of directors, boards of commissioners and employees rather than IT functions alone. The collection pact addresses ethical and responsible practices, including protecting personal data and avoiding intimidation and violence. Online lending providers remain responsible for ensuring that collection processes comply with applicable rules and ethical principles.