Indonesia: Digital "stargazing" through 2021: Bank Indonesia overhauls payment system regulations

In brief

Happy New Year 2021! We hope that this year things will get better.

Bank Indonesia has issued Regulation No.22/23/PBI/2020 on Payment Systems ("Payment System Regulation"), which is an "umbrella" regulation for the payment system industry. The issuance of this regulation is an implementation of the 2025 Indonesia Payment System Blueprint, which we outlined in our previous client alert. This "umbrella" regulation restructures the regulatory framework of payment systems, including the reclassification of activities of payment system operators. Bank Indonesia's approach in outlining the rules introduced in this regulation appears to be principle-based and strategic. The technical and operational details of how the rules are supposed to be observed will be outlined in future Bank Indonesia implementing regulations. We anticipate that those will be issued in the coming months, so keep an eye on this space.

The Payment System Regulation revamps the payment system industry to support the digitalization of financial services to keep up with the fast-paced developments in the Indonesian payments space, while ensuring that the security and reliability of payment transactions remain the priorities. This regulation shifts the approach to setting the regulatory framework from an entity-based approach to an activities and risk-based approach. In this vein, Bank Indonesia would be able to be more nimble in responding to developments in digital financial services while upholding consumer protection.

Given the extensive coverage of topics that are captured in the regulation, this initial Client Alert only focuses on licensing and ownership topics.

Bank Indonesia classifies payment system operators into the following:

  1. Payment Services Operators (Penyedia Jasa Pembayaran, a PJP), i.e., banks or non-bank entities that provide services to facilitate payment transactions to users
  2. Payment System Infrastructure Operators (Penyelenggara Infrastruktur Sistem Pembayaran, a PIP), i.e., parties that operate infrastructure as facilities that can be used to move funds for the interests of their members

This regulation will only be applicable from 1 July 2021. However, given that the regulation overhauls the payment system industry and contains a grace period to comply with the rules therein, the payment system industry needs to start planning to align with the new framework in this regulation. We expect that licensing applications that are still in the pipeline with Bank Indonesia and new applications will be evaluated based on the framework under this regulation. Like in any situation where there is an overhaul of a regulatory framework, there are things that need to be clarified with Bank Indonesia.  

Categories of payment system operators

A PJP may conduct any of the following four activities ("PJP Activities"):

  1. account information services (penyediaan informasi sumber dana), which include the provision of information on the source of funds as consented to by the user for payment initiation purposes
  2. payment initiation and/or acquiring services, which include routing of payment transactions
  3. account issuance services (penatausahaan sumber dana), which include authorization of payment transactions
  4. remittance services, which include the acceptance and execution of fund transfer instructions in respect of a source of funds that does not originate from an account administered by the remittance operator

A PIP may have two activities:

  1. clearing services, which include reconciliation, confirmation and calculation of financial rights and obligations of members of the PIP before the execution of the settlement
  2. settlement services, which include final and binding settlement by way of account debiting and crediting based on the outcome of the clearing process

In operating the payment system, PJPs and PIPs are further classified into three risk-based categories, depending on the impact that any disturbances or failures in their operations would have on the Indonesian payment and/or financial system:

  1. Systemic Payment System Operators (Penyelenggara Sistem Pembayaran Sistem)
  2. Critical Payment System Operators (Penyelenggara Sistem Pembayaran Kritikal)
  3. General Payment System Operators (Penyelenggara Sistem Pembayaran Umum), i.e., payment system operators that do not pose any significant impact

The above categories are determined based on the size, interconnectedness, complexity and/or substitutability of the payment system operators. Bank Indonesia will periodically evaluate the classification of PJPs and PIPs, based on which Bank Indonesia may set certain requirements in relation to the operators' capitalization, risk and information system management as well as other aspects.

Licenses and approvals for PJPs and PIPs

Bank Indonesia adopts a licensing system based on activities bundling:

  • A category 1 license allows all four PJP Activities.
  • A category 2 license allows for the first and second PJP Activities.
  • A category 3 license only allows for the fourth PJP Activity and/or any other activity that may be determined by Bank Indonesia.

Bank Indonesia will evaluate applications for licenses based on (i) entity aspects, (ii) capital structure and financial aspects, (iii) risk management capabilities, and (iv) information system capabilities.

For existing licensed payment service providers, Bank Indonesia will conduct assessments to reclassify their existing activities into the activities listed in this regulation. The existing licensed operators will have a grace period of two years to comply with the requirements under this regulation.

Any entity that wishes to undertake a PIP activity would require a prior appointment/designation by Bank Indonesia.

The Payment System Regulation has also updated the regulatory approval mechanism for new products/services and cooperation arrangements between payment service providers. Bank Indonesia has introduced a self-assessment system by which payment service providers ought to, as a first tier, assign risk rating to the proposed product/service or cooperation arrangement. Product approval applications that are deemed to be of low risk only need to be reported to Bank Indonesia, while those that are determined to be of medium or high risk must be approved by Bank Indonesia prior to launching. The same principle goes for cooperation arrangements with other payment service providers. Bank Indonesia reserves the right to re-examine the risk rating assigned by the payment service provider and can require a prior approval to be sought in the event of a difference. This new system should substantially reduce the administrative burden (on Bank Indonesia) that the previous regime entailed, which virtually required any kinds of product and cooperation arrangements to be blessed by Bank Indonesia. 

Ownership and control of a non-bank PJP

This regulation differentiates between ownership and control for a non-bank PJP. Ownership and control for a bank PJP continues to be governed under the banking regulations.

Under the Payment System Regulation, a minimum of 15% of the shares in a non-bank PJP must be owned by Indonesian individuals and/or legal entities. In addition to this ownership requirement, at least 51% of shares with voting rights must be owned by Indonesian individuals and/or legal entities.

If there are special rights to nominate a majority of the directors and/or commissioners and veto rights in shareholders' meetings that may significantly impact the company, the rights must be held by Indonesian individuals and/or legal entities.

Ownership and control of A PIP

A minimum of 80% of the total shares and a minimum of 80% of shares with voting rights in a PIP must be owned by Indonesian individuals and/or legal entities.

If there are special rights to nominate a majority of the directors and/or commissioners and veto rights in shareholders' meetings that may significantly impact the company, the rights must be held by Indonesian individuals and/or legal entities.

* * * * *

LOGO_Indonesia HHP Law Firm_Jakarta

This client alert was issued by HHP Law Firm (Hadiputranto, Hadinoto & Partners), a member firm of Baker McKenzie International, a global law firm with member law firms around the world. In accordance with the common terminology used in professional service organizations, reference to a "partner" means a person who is a partner or equivalent in such a law firm. Similarly, reference to an "office" means an office of any such law firm. This may qualify as "Attorney Advertising" requiring notice in some jurisdictions. Prior results do not guarantee a similar outcome." 

Copyright © 2024 Baker & McKenzie. All rights reserved. Ownership: This documentation and content (Content) is a proprietary resource owned exclusively by Baker McKenzie (meaning Baker & McKenzie International and its member firms). The Content is protected under international copyright conventions. Use of this Content does not of itself create a contractual relationship, nor any attorney/client relationship, between Baker McKenzie and any person. Non-reliance and exclusion: All Content is for informational purposes only and may not reflect the most current legal and regulatory developments. All summaries of the laws, regulations and practice are subject to change. The Content is not offered as legal or professional advice for any specific matter. It is not intended to be a substitute for reference to (and compliance with) the detailed provisions of applicable laws, rules, regulations or forms. Legal advice should always be sought before taking any action or refraining from taking any action based on any Content. Baker McKenzie and the editors and the contributing authors do not guarantee the accuracy of the Content and expressly disclaim any and all liability to any person in respect of the consequences of anything done or permitted to be done or omitted to be done wholly or partly in reliance upon the whole or any part of the Content. The Content may contain links to external websites and external websites may link to the Content. Baker McKenzie is not responsible for the content or operation of any such external sites and disclaims all liability, howsoever occurring, in respect of the content or operation of any such external websites. Attorney Advertising: This Content may qualify as “Attorney Advertising” requiring notice in some jurisdictions. To the extent that this Content may qualify as Attorney Advertising, PRIOR RESULTS DO NOT GUARANTEE A SIMILAR OUTCOME. Reproduction: Reproduction of reasonable portions of the Content is permitted provided that (i) such reproductions are made available free of charge and for non-commercial purposes, (ii) such reproductions are properly attributed to Baker McKenzie, (iii) the portion of the Content being reproduced is not altered or made available in a manner that modifies the Content or presents the Content being reproduced in a false light and (iv) notice is made to the disclaimers included on the Content. The permission to re-copy does not allow for incorporation of any substantial portion of the Content in any work or publication, whether in hard copy, electronic or any other form or for commercial purposes.