Policy desk

Companies publishing content to the Indonesian market will need to label AI-generated content once the rules take effect

Companies offering AI-generated content or products in Indonesia will need to build labelling capability into their outputs once the rule takes effect.

Automakers and ADAS suppliers must audit all marketing materials, manuals, and launch statements to remove exaggerated claims or wording that downplays driver responsibility

Microsoft's UK bundling and default-install practices, including Copilot, face regulatory intervention risk; enterprises relying on the Microsoft ecosystem could gain more supplier choice

Companies deploying AI agents in Singapore and the region can use the reference architecture to design inter-agent authentication and trust transfer, improving interoperability.

On-device LLMs offered in China must complete CAC filing before launch; devices without updated filings (e.g. iPhone 15/15 Plus) do not carry the AI features

Companies must use IMDA's testing kit to evaluate agentic AI system safety

Mobile phone manufacturers must file AI models used in their devices with Chinese regulators

Obligation: institutions deploying AI-automated payment systems must implement risk management requirements for high-risk transactions above VND 10 million (individuals) and VND 50 million (organisations).

AI companies must establish model control and monitoring mechanisms to ensure technical safety

Companies must comply with Hanoi's upcoming local AI regulations

Provides companies with a legal framework to prevent misuse of celebrity voices

Companies must ensure AI and blockchain applications comply with Indonesia's data governance requirements

Companies must sign commercial agreements with Reddit to access its data

AI-generated marketing content using real people's likeness or voice is a primary enforcement target, risking account bans and content removal

Companies must establish robust AI safety control systems with dedicated teams

Provides citizens with a more accessible entry point to government services, simplifying information retrieval across agencies

Google must provide access to certain data and services to competitors, altering its market behavior

Research institutions need to increase AI R&D investment, particularly in foundation models and intelligent scientist systems

Operators can formally apply for commercial autonomous vehicle operations, moving beyond pilot programs

Data centre operators must provide equivalent renewable energy to their power consumption, increasing operational costs

AI companies must evaluate whether their product restrictions comply with supply chain security regulations to avoid being classified as 'manipulating products'

Enhanced public safety: Real-time detection of violence and vandalism enables faster police response

Data center operators must disclose their energy and water consumption data

Provides traceability for AI-generated content, helping identify content sources

Increases credibility and transparency of AI model evaluation results

Obligations: Enterprises must invest in building an organizational ontology to provide context for AI agents. • Opportunities: A well-defined ontology enables more effective AI-driven automation and decision-making. • Deadlines: While not explicitly stated, the guide implies a need for immediate action to catch up with the pace of AI-driven network attacks.

E-commerce and livestream platforms must adopt AI technology to strengthen compliance and prevent issues like counterfeit products and price fraud

AI-assisted works will receive partial copyright protection, with only human-creative portions legally protected

Obligations: Companies deploying Meta smart glasses must comply with Meta's privacy guidelines, implementing the indicator light system and applying software updates to prevent vulnerabilities.