Best Data Center & Digital Infrastructure Lawyers in Malang

What legal work can a Malang data center project involve?

Legal work for data center facilities and digital infrastructure in Malang can span site acquisition, zoning, construction, power supply, telecommunications connectivity, environmental approvals, and data protection. The required steps depend on the site, the project’s scale, and whether the operator also provides services such as cloud hosting or telecommunications.

Location matters. A site in Kota Malang follows that city’s spatial plans and local processes, while a site in Kabupaten Malang falls under the regency’s jurisdiction. Before committing to a site, check its permitted use and confirm that power, fiber routes, water, drainage, and access can support the proposed facility.

There is no single permit that covers every data center project. Depending on the business and construction, the process may involve registration and licensing through Indonesia’s Online Single Submission (OSS) system, spatial conformity, environmental approval, a Building Approval (PBG), and a Certificate of Function Worthiness (SLF).

When a lawyer can help with a Malang project

• Before signing a site lease or purchase agreement: A lawyer can check land documents, permitted use, access rights, and conditions that could make a proposed site unsuitable in Kota Malang or Kabupaten Malang.
• When planning a new facility or conversion: A lawyer can help identify the approvals that may apply to construction, generators, cooling equipment, and the intended building use.
• When power or connectivity arrangements are complex: Legal review can clarify supply, service-level, access, and maintenance obligations with utilities, landlords, contractors, or telecommunications providers.
• When environmental review is required: A lawyer can help coordinate the approval process and contractual responsibilities for matters such as generator emissions, water use, cooling systems, and waste.
• When the operator handles personal data or provides digital services: Legal advice can help assess data-protection duties and whether electronic-system operator registration applies.
• When there is a land, construction, or service dispute: Counsel can review the contract, preserve relevant records, and advise on negotiation, mediation, or court proceedings in the appropriate Indonesian forum.

Key Indonesian laws and regulations

Law No. 27 of 2022 on Personal Data Protection governs personal-data processing. It was promulgated on 17 October 2022, with a two-year transition period that ended on 17 October 2024. Its relevance depends on whether an operator acts as a personal data controller, processor, or both.

Government Regulation No. 16 of 2021 on the Implementation of the Buildings Law provides the framework for building approvals and certificates, including PBG and SLF. These requirements can apply to constructing, altering, or using a data center building.

Government Regulation No. 22 of 2021 on the Implementation of Environmental Protection and Management sets out environmental approval requirements. The applicable assessment, such as AMDAL or UKL-UPL, depends on the project’s characteristics and regulatory criteria.

These national rules operate alongside the spatial plans and administrative requirements applicable to the specific Kota Malang or Kabupaten Malang site. A lawyer should verify current local requirements and the project’s business classifications before an application is filed.

Frequently asked questions

Do I need a lawyer before leasing a data center site?

Legal review before signing can identify title, zoning, access, utility, and termination risks. It can also help make the lease conditional on obtaining necessary approvals or confirming technical feasibility.

Does Kota Malang have the same approval process as Kabupaten Malang?

National laws apply across both jurisdictions, but local spatial plans and administrative processes can differ. Confirm which local government has authority over the exact parcel before relying on a permit pathway.

What approvals might a new data center need?

Depending on the project, these may include OSS business licensing, spatial conformity, environmental approval, PBG, and SLF. The activities conducted at the site and the building’s scope determine which requirements apply.

Can an existing warehouse be converted into a data center?

Possibly, but the existing building approval may not cover the proposed use or alterations. Check zoning, structural suitability, fire and life-safety requirements, environmental obligations, and whether a revised PBG or other approval is needed.

Does every data center operator need to register as an electronic system operator?

Not necessarily; the answer depends on the services offered and the operator’s role under applicable Indonesian rules. A lawyer can assess whether private-scope electronic system operator registration applies and check current filing requirements.

Will the project need an AMDAL or UKL-UPL?

That depends on the project’s type, scale, location, and potential environmental impacts under the applicable criteria. The assessment should be made before construction or other activities that require environmental approval.

How long do licensing and construction approvals take?

There is no reliable single timeline because completeness, project classification, local requirements, and technical reviews affect processing. Allow time for document preparation and revisions, and confirm current estimates with the relevant authority before setting construction milestones.

How much does a data center lawyer in Malang cost?

Fees depend on the scope, such as a site review, permit support, contract negotiation, or ongoing project work. Ask for a written scope and fee basis, and clarify whether government charges, technical consultants, taxes, and disbursements are additional.

Can a foreign investor establish or operate a data center in Malang?

Foreign investment may be possible, but eligibility and licensing depend on the business classification, investment structure, and current investment rules. Obtain advice before incorporating, signing a long-term lease, or transferring funds.

Who is responsible for personal data stored at a data center?

Responsibility depends on the parties’ actual roles and activities, not just the contract labels. A facility operator may have different duties from a customer that determines why and how personal data is processed.

What if a fiber route or utility connection crosses another party’s land?

Access and installation rights should be documented with the landholder or relevant infrastructure provider. A lawyer can review easements, permits, construction access, maintenance rights, and responsibility for damage or service interruption.

Official resources in Malang

• OSS risk-based licensing system: The national online system for business identification numbers and risk-based business licensing. Applicants can use it to review licensing requirements for their declared activities.
• Malang City Investment and One-Stop Integrated Services Office (DPMPTSP Kota Malang): Handles local investment and licensing services within Kota Malang and can direct applicants to relevant city processes.
• Malang Regency Investment and One-Stop Integrated Services Office (DPMPTSP Kabupaten Malang): Handles local investment and licensing services within Kabupaten Malang. Confirm the correct office based on the site’s administrative location.

Steps to find and hire a lawyer

1. Define the project and site. Record the proposed location, land status, facility capacity, construction plans, and services. Allow one to three days to assemble the basic information.
2. Confirm the jurisdiction and immediate risks. Check whether the parcel is in Kota Malang or Kabupaten Malang, and identify any lease, purchase, or construction deadline. Do this before making a binding commitment where possible.
3. Shortlist lawyers with relevant Indonesian experience. Ask about work involving land, OSS licensing, construction approvals, environmental compliance, telecommunications, and data protection. Allow several days to compare candidates.
4. Request a conflicts check and focused initial review. Share relevant documents securely and ask the lawyer to identify key risks, missing documents, and the likely approval pathway. A preliminary review may take several days to a few weeks, depending on complexity.
5. Compare written scopes and fees. Confirm deliverables, responsible team members, billing method, exclusions, and expected response times. Separate legal fees from government charges and technical consultant costs.
6. Agree on milestones and authorize work in writing. Set priorities for site diligence, contracts, applications, and compliance advice, then keep copies of submissions and authority correspondence. Revisit the plan when the site or project scope changes.