On 15 October 2012, the Indonesian government passed regulation no. 82/2012 introducing data localisation restrictions.
Based on the regulation, electronic systems operators for public services need to establish a data centre and a disaster recovery centre within Indonesia (art. 43 (1) of government regulation 82/2012).
According to Bauer, Makiyama, van der Marel and Verschelde (ECIPE report, 2014, p.12), the data localisation requirements are 'unclear however, as electronic systems operators for public service are not clearly defined'.
 

Update:

Given these uncertainties, a draft circulated in 2018 specifying that only "strategic electronic data" must be stored within Indonesia (see Sources).