What 2026's Regulatory Cluster Means for Buyers, Sellers, and Dealmakers

Indonesia has long been one of Southeast Asia's most attractive investment destinations — a market of nearly 290 million people, GDP growth hovering near 5%, and a growing middle class. But attractiveness on paper has never been the hard part of doing deals in Indonesia. Execution has. Over the past year, a cluster of regulatory changes has reshaped how commercial structuring, M&A, and cross-border transactions actually get done — and dealmakers who are still working from 2023 or 2024 precedents are operating with an outdated playbook.

This piece walks through the current state of Indonesian deal structuring: how foreign ownership rules have shifted, why corporate criminal liability is now a first-order transactional issue, what a new mandatory compliance regime means for due diligence, and how experienced dealmakers are adapting pricing, indemnities, and deal documents in response.

1. The 2025–2026 Regulatory Cluster, at a Glance

Rather than arriving as a single reform package, the changes reshaping Indonesian dealmaking came from several overlapping instruments issued by different institutions over roughly a twelve-month window:

• Omnibus Law amendments, updating the foreign investment framework (the former Negative Investment List, now reframed as an Investment Priority List) and adjusting PT PMA (foreign investment company) capital and notification requirements.
• Law No. 1 of 2026, formalizing corporate criminal liability and aligning sentencing with the new Criminal Code.
• Ministry of Law and Human Rights Regulation No. 49 of 2025 ("Permenkum 49/2025"), introducing a mandatory company compliance assessment regime for Indonesian limited liability companies.
• The new Criminal Code (KUHP), which took effect on 2 January 2026, replacing the colonial-era criminal code and expanding corporate offense provisions.
• KPPU Regulation No. 3 of 2023, which had already overhauled merger notification thresholds and extended the competition authority's reach to foreign-to-foreign transactions, continues to interact with these newer instruments.
• Minister of Finance Regulation No. 1 of 2026 ("PMK 1/2026"), issued 22 January 2026, revising tax treatment for restructurings, including the use of book value in mergers, demergers, and asset transfers involving state-owned enterprises.

No transaction signed or closed from early 2026 onward can be structured without accounting for this cluster — and deals papered in 2025 but not yet closed warrant a fresh look, particularly around compliance representations and criminal exposure warranties.

2. Foreign Ownership and Entry Structures: What's Actually Changed

Indonesia's foreign ownership rules continue to be organized around a sectoral classification system. The Omnibus Law amendments replaced the old negative list with a risk-based licensing framework, sorting business activities into priority, open, and restricted categories. Priority sectors are generally open to full foreign ownership through a PT PMA and may carry fiscal incentives; other sectors — including several in media, telecommunications, logistics, and domestic trade — retain foreign equity caps commonly set at 49%, 67%, or 95% depending on the activity. Every deal still needs a line-by-line check of the target's business classification code against the current schedules before structuring even begins.

Common entry and deal structures in the region typically fall into three categories: direct share acquisition through an intermediate holding company (commonly in Singapore or Hong Kong), joint ventures in markets with foreign ownership limits, and asset purchases where a share deal is legally or structurally complicated. Indonesia, alongside Vietnam and the Philippines, remains one of the markets where joint ventures are most frequently used to navigate ownership restrictions.

For structuring purposes:

• PT PMA incorporation or conversion. A local PT can convert to a PT PMA following a foreign share acquisition, subject to notification to Indonesia's investment ministry (BKPM) and sectoral clearance.
• Joint ventures. Where caps apply, the JV agreement needs careful attention to governance, deadlock resolution, put/call options, and exit mechanics that will actually hold up under Indonesian corporate law.
• Nominee arrangements remain off the table. These structures continue to carry significant legal risk in Indonesia and were not validated by the recent reforms — a point worth repeating given how often it still comes up in early-stage deal conversations.
• Share deals vs. asset deals. Share acquisitions dominate Indonesian M&A because asset transfers can trigger the loss of operating permits tied to the selling entity, along with separate tax exposure. Where a target carries significant contingent liabilities or an uneven compliance record, however, an asset deal may offer cleaner risk separation — worth modeling early rather than defaulting to a share deal by convention.

Regional context matters too. Compared with its ASEAN peers, Indonesia tends to be sector-specific on both approval timelines and ownership limits — a position eased somewhat since the Omnibus Law but still more fragmented than Singapore's faster, lighter-touch entry process. Award enforceability in Indonesian courts is also less predictable than in more arbitration-friendly jurisdictions, which is why cross-border agreements touching Indonesia default overwhelmingly to international arbitration — commonly under SIAC rules — rather than local court jurisdiction.

Many investors continue to route Indonesian investments through a Singapore or Hong Kong holding structure, largely for tax treaty access and governance familiarity. Where this route is used, tax authorities increasingly expect genuine economic substance in the holding jurisdiction rather than a purely nominal presence — Singapore's substance requirements in particular have tightened, and treaty-shopping structures are drawing greater scrutiny across the region.

3. Corporate Criminal Liability: The Single Biggest Shift for Deal Documents

If one development deserves the most attention from anyone structuring a deal with Indonesian exposure in 2026, it's Law No. 1 of 2026. The law formally codifies when a corporation — separate from its individual directors, commissioners, or employees — can face criminal prosecution, and aligns available sanctions with the new Criminal Code's penalty framework.

Under the law, a corporation can be held criminally liable where an offense is committed by, for, or on behalf of the company by anyone exercising effective control, regardless of whether that person holds a formal position within the company. Individual directors and commissioners can be prosecuted alongside the corporate entity itself — meaning personal exposure for officers is no longer confined to regulatory or administrative penalties. Sentencing is aligned with the Criminal Code: where an offense would carry imprisonment for an individual, the corporate equivalent is a fine calculated at a prescribed multiple, alongside potential license revocation, confiscation of proceeds, and publication of the judgment.

What this means for deal documents:

• Representations need to go further. Standard reps confirming no pending litigation are no longer sufficient. Buyers should require sellers to represent that neither the target nor its directors, commissioners, or key employees are subject to any criminal investigation, prosecution, or pending complaint, and to warrant that no conduct has occurred that would constitute a corporate offense under the new framework.
• Indemnities need a dedicated carve-out. Standard indemnities typically exclude criminal fines and penalties by default. Buyers should negotiate specific indemnification for losses arising from pre-closing corporate criminal conduct — potentially backed by a dedicated escrow tranche, since this exposure won't be picked up by general indemnity caps.
• D&O coverage needs confirmation, not assumption. Incoming directors should require written confirmation that D&O insurance is in place, that it has been checked against the new liability framework (at minimum for defense costs), and that run-off cover will continue for pre-closing conduct — typically for several years post-closing.
• MAC clauses should be updated. Material adverse change definitions should expressly capture the commencement of criminal proceedings under the new framework as a potential closing condition or walk-away trigger.

Insurance buyers should also be aware of a coverage gap: most warranty and indemnity (W&I) policies exclude criminal fines and penalties, and standard fraud exclusions will typically also capture conduct that now qualifies as a corporate offense. In practice, this means W&I insurance — increasingly common in competitive Indonesian auction processes — should not be relied on as the primary protection against this category of risk. Escrow and holdback mechanisms remain the more dependable tool.

4. Mandatory Compliance Assessments: A New Diligence Baseline

Permenkum 49/2025 introduced a mandatory compliance self-assessment regime applying broadly to Indonesian limited liability companies, including PT PMA entities. Companies are expected to document their adherence to applicable law, their articles of association, internal policy, and good governance principles — and to maintain this as an ongoing program rather than a one-off exercise.

For due diligence teams, this changes what a complete data room now looks like. Buyers should expect to request and review:

• Board and shareholder resolutions evidencing that key corporate actions were properly authorized
• Documentation of a designated compliance officer or function
• Internal policies covering anti-bribery, anti-money laundering, data privacy, employment, and environmental matters, together with evidence of training and actual implementation
• Whistleblower reports, internal audit findings, remediation logs, and regulatory correspondence
• The annual compliance self-assessment report itself

A target that cannot produce a completed assessment should expect meaningfully more scrutiny — and sellers preparing for a sale process are well served by front-loading this work. A practical remediation sequence looks roughly like this: a gap analysis and compliance officer appointment in the first 30 days, drafted or updated internal policies with training rollout over the following month, and a completed self-assessment with documented remediation in the final stretch before the data room opens. Sellers who complete this work ahead of buyer due diligence tend to see fewer price adjustments and lighter escrow demands; those who cannot should expect the opposite.

5. Pricing, Indemnity Design, and Escrow in a Higher-Risk Environment

The cumulative effect of these reforms is that Indonesian deal structuring now runs through a materially higher-risk filter than it did two years ago. Where diligence surfaces compliance gaps, unresolved regulatory exposure, or potential criminal risk, buyers generally have three tools available, often used in combination:

1. Purchase price adjustment — a downward adjustment reflecting quantified or estimated regulatory exposure, applied at closing or through a post-closing mechanism tied to a remediation schedule.
2. Specific, uncapped or high-cap indemnities — targeted coverage for identified risks, particularly criminal and regulatory exposure. Sellers in Indonesian practice tend to resist uncapped indemnities, so this is increasingly a genuine point of negotiation rather than boilerplate.
3. Deferred or contingent consideration — structuring part of the purchase price as deferred, with release conditions tied to the absence of criminal proceedings or regulatory sanctions within a defined post-closing window.

On escrow specifically, a dedicated compliance escrow — commonly in the range of 5–15% of enterprise value, held for 24–36 months depending on risk profile — has become a more standard feature of Indonesian deal structures than it was previously, precisely because insurance coverage has real gaps in this area. Carving criminal and regulatory risk out of the general indemnity cap (so these claims sit outside standard thresholds) is another structuring choice worth building into term sheets early, rather than negotiating from a weaker position later in the process.

6. Regulatory Approvals: Coordinating a More Complex Sequence

Indonesian merger control remains a post-closing notification system administered by the Indonesia Competition Commission (KPPU) — but the practical challenge has never really been the KPPU filing in isolation. It's coordinating that filing with everything else that needs to happen around it.

A transaction meeting the prescribed asset or revenue thresholds must be notified to the KPPU within 30 working days of the deal's legal effective date; a full substantive review, where triggered, can extend to 90 working days. In parallel, any transaction involving a change in foreign shareholding requires notification to BKPM, and — depending on the sector — separate clearance from bodies such as the Financial Services Authority (OJK) for financial institutions, the communications ministry for telecoms and digital businesses, or the energy ministry for mining and resources. Approval timeframes across these bodies vary widely, from roughly two to three weeks for standard BKPM notifications up to 60–90 days or more for licensed financial institution acquisitions.

The practical risk isn't any single approval being denied — it's sequencing errors, where a deal closes without one of the required clearances in place, or where approvals are pursued in an order that creates avoidable delay. Mapping the full approval pathway before signing, not after, remains the difference between a clean close and a messy one.

7. Due Diligence: What's New on the Checklist

Beyond the standard workstreams — corporate records, material contracts, employment, IP, insurance, and litigation — a handful of risk areas now warrant dedicated attention in any Indonesia-linked transaction:

• Compliance assessment status. Has the target completed a Permenkum 49/2025 self-assessment, and is a compliance officer formally appointed?
• Criminal exposure. Are there pending or historical criminal investigations involving the company or its directors? This requires a dedicated records search and regulatory correspondence review, not just a litigation disclosure schedule.
• Foreign ownership compliance. Does the target's actual business activity match its registered classification, and does foreign ownership sit within permitted caps?
• Tax and social security compliance. Are there unresolved tax disputes or gaps in mandatory social security (BPJS) contributions?
• Government and state-owned enterprise contract dependencies. Do key contracts include change-of-control consent or novation requirements that a transaction would trigger?
• Environmental permitting. Is the target's environmental impact assessment (AMDAL) documentation current and complete?

Criminal and regulatory compliance diligence has effectively become a core workstream in Indonesian deals rather than a secondary check — a shift dealmakers should build into both timeline and budget from the outset of a transaction.

8. Post-Closing: The First 90 Days Matter More Than They Used To

Closing a transaction in Indonesia is the beginning of the compliance workload, not the end of it. A well-run first 90 days typically includes:

• Data privacy alignment with Indonesia's Personal Data Protection Law, including updated data processing agreements, data subject notifications, and cross-border transfer assessments where relevant.
• Extension of anti-bribery and anti-corruption policies to the newly acquired entity, with prompt training for management and key commercial staff.
• Employment contract and benefits review, checking alignment with current labor regulations, including any changes to severance and termination provisions introduced by the Omnibus Law amendments.
• Regulatory filing updates, including BKPM registration changes, beneficial ownership filings, and sector-specific notifications reflecting the new ownership structure.

9. Practical Takeaways

For buyers, sellers, and general counsel currently evaluating or executing a transaction with Indonesian exposure, a few priorities stand out:

1. Recheck sectoral ownership limits against the current framework before committing to a deal structure — don't rely on precedent from a prior transaction.
2. Establish the target's compliance assessment status early. Gaps here will show up in pricing, indemnity, and escrow negotiations regardless of which side of the table you're on.
3. Treat criminal risk diligence as its own workstream, not a subset of general litigation review.
4. Update template transaction documents. Representations, indemnity caps, MAC definitions, and escrow mechanics built on pre-2026 precedent are no longer fit for purpose.
5. Confirm — don't assume — D&O and W&I coverage adequacy, particularly around criminal liability exclusions.
6. Map the full regulatory approval pathway before signing, coordinating BKPM, KPPU, and any sector regulators into a realistic transaction timetable.

Indonesia's commercial appeal hasn't changed — scale, growth, and a deepening digital and consumer economy remain the draw. What has changed is the margin for structural error. Deals that are well-structured from the outset, with realistic diligence scope and deal documents built for the current regulatory environment, are the ones that close cleanly and stay closed.

This article is intended for general informational purposes only and does not constitute legal or tax advice. Transaction structuring should be assessed against the specific facts, sector, and parties involved, in consultation with qualified legal and tax advisors.