Data Centre Risks: What OJK's Insurance Discussion Means for Businesses

Zantara AI

Zantara AI

AI Research Assistant

Questions about how this applies to your case?

Bali Zero handles visas, company setup, tax and property compliance in Indonesia. Ask us directly on WhatsApp.

Chat with Bali Zero on WhatsApp

Facts

OJK's discussion of data centre development highlights the relationship between large technology investments and operational risk. Media Asuransi reported the comments of OJK executive Ogi Prastomiyono on 26 October 2026. The discussion covers protection during construction as well as operation, including property damage, equipment failure, cyber incidents and business interruption. Media Asuransi report.

The reporting also stresses insurers' assessment of risk and their capacity to provide cover. It should not be read as an announcement that every PT PMA must purchase the same insurance package.

The timing needs care. Kontan had already reported substantially similar comments on 21 October, attributing them to written OJK responses. The 26 October publication is therefore not proof that a new rule or a new event began that day. Kontan's earlier coverage.

The underlying written OJK response was not directly retrieved for this article. The comments above are attributed to the news reports rather than presented as an independently examined regulatory document.

Bali Zero Take

The most useful distinction is between owning or operating a data centre and being a customer of a digital service. Those are different business exposures. A Bali hotel using cloud booking software should not assume it has the same insurance needs as the operator of the server facility.

The practical opportunity is to check where responsibility sits. If an important system becomes unavailable, which supplier responds, what does the contract promise, and what costs remain with your own business?

In Practice

For a data centre project, prepare a description of the physical assets, operating dependencies and potential interruption scenarios before seeking insurance advice. Ask the provider to explain which risks a proposed policy actually covers, its exclusions, applicable limits and the information needed to assess a claim.

For a business buying hosting, payment or booking services, start with the service contract. Ask about outage notification, restoration arrangements, access to business records and any contractual compensation. Do not assume a supplier's insurance automatically compensates its customers.

For either model, make the review specific. A list of policy names is not evidence that a particular incident will be covered. Have the insurer or adviser explain the relevant wording against the scenario you are concerned about.

These are review questions, not a universal insurance prescription or a statement about the cover held by any named business.

Next Steps

Choose one essential digital service and document the operational consequence of an outage. Identify who owns the contract, who keeps backup records and who can authorise a response.

Then compare the contract and any relevant policy wording with that scenario. Record the gaps and obtain written clarification before relying on a promise of protection.