Regulation of the Board of Commissioners of the Financial Services Authority Number 1 of 2026 on Information Technology Management by Commercial Banks

The Financial Services Authority (OJK) issued Regulation of the Board of Commissioners Number 1 of 2026 to mandate comprehensive information technology governance and risk management for all commercial banks. The regulation requires banks to establish robust IT governance structures, manage IT risks including data protection, and obtain licensing for IT systems and services located outside Indonesia. This regulation supersedes previous guidelines and becomes effective on March 1, 2026, to ensure IT utilization adds value while mitigating operational risks.

Otoritas Jasa Keuangan (Financial Services Authority) logo

Indonesia

Otoritas Jasa Keuangan (Financial Services Authority)

Click to view full text