What Is ASEAN's DEFA? What the Digital Pact Means for Indonesia

What is ASEAN's DEFA, and what will it change for Indonesian businesses? The ASEAN Digital Economy Framework Agreement is a region-wide pact on digital trade, data, payments and related rules. ASEAN's senior economic officials concluded negotiations in Manila in May 2026, and the bloc plans to sign it in November 2026 alongside the 49th ASEAN Summit in Manila. The text is still under legal review and has not been published, so its exact obligations are not yet known. But the areas it covers touch almost every company that sells, pays or moves data across Southeast Asian borders, and Indonesia's government has set high expectations for it.

Where DEFA stands now

According to a statement by the chair of the ASEAN Senior Economic Officials Meeting dated 30 May 2026, officials resolved all outstanding issues at a meeting in Manila on 27 to 29 May. That followed the 27th ASEAN Economic Community Council meeting in Cebu on 7 May, where ministers directed officials to finish the remaining issues. ASEAN describes DEFA as its first region-wide digital economy agreement.

ANTARA reported on 8 May that Airlangga Hartarto, Indonesia's Coordinating Minister for Economic Affairs, said the text was not yet perfect but had to be finalised, with periodic reviews to keep up with the digital economy. He said signing depended on legal scrubbing and domestic consultations in each country, and that ratification by each member state was targeted within 180 days of signing. On 16 October, ASEAN Secretary-General Kao Kim Hourn told TV BRICS, in an interview reprinted by the Ghana News Agency, that the agreement would be signed at the 49th Summit and that member states were conducting an internal legal review. He described it as the world's first legally binding regional agreement on the digital economy. DEFA was first launched during Indonesia's ASEAN chairmanship in 2023.

What the agreement covers

ASEAN's statement lists the areas the agreement provides a regional framework for. It says the provisions build on existing work such as the ASEAN Single Window, digital payments connectivity, cross-border data initiatives, online consumer protection and the ASEAN Unique Business Identification Number.

• Digital trade and cross-border e-commerce, including recognition of electronic contracts, signatures and trade documents, as ASEAN Briefing describes it.
• Data governance and privacy, including the transfer of data between countries.
• Digital identity and electronic authentication.
• Electronic payments and the interoperability of national payment systems.
• Online safety and cybersecurity cooperation.
• Competition policy, emerging technologies such as artificial intelligence, and digital talent mobility.

What it will not do on its own

An analysis by ASEAN Briefing, published on 19 October, sets out the limits as far as they can be judged before the text is released. It says DEFA would not automatically override national data protection or data localisation rules, would not create a single ASEAN payment network or e-invoicing regime, and would not automatically let a payment provider licensed in one country operate in another. It also says not every area negotiated will necessarily create binding obligations, and that the agreement does not automatically create uniform ASEAN rules for AI. On data, it notes that Indonesia permits international transfers but adds requirements in some circumstances, including for regulated activities and certain categories of data.

The same analysis cites survey findings from the ASEAN Digital Economy Outlook 2026 that show the problems DEFA is meant to address: 65.9% of surveyed businesses named uncertainty over cross-border data transfer requirements as an obstacle, 66.8% of those using cross-border digital payments reported delays, and 58.4% still had to submit hard-copy trade documents to border authorities.

What Indonesia's government expects

ASEAN says its digital economy is projected to reach about US$1 trillion by 2030 on current trends, and that studies indicate DEFA could double that to US$2 trillion. ANTARA attributed the US$2 trillion estimate to a Boston Consulting Group study cited by Airlangga. Kao Kim Hourn's interview gave a starting point of US$300 billion in 2025. These are projections, not measured outcomes.

Indonesia's figures vary between reports. CNBC Indonesia reported that, speaking in Bogor on 27 August, Airlangga gave a projection of US$340 billion for Indonesia's digital economy in 2030 and a government target of US$600 billion linked to DEFA, without a year for the second figure. The same day, detikFinance reported him saying Indonesia's share could be 30 to 40% of the regional market. The basis for each number was not set out in the reports we read. Airlangga also linked DEFA to Indonesia's National Digital Economy Strategy 2030, its OECD accession process and national data sovereignty.

On payments, detikFinance reported that Airlangga called the payment system the agreement's low-hanging fruit and said Bank Indonesia's QRIS could be used across ASEAN once DEFA is signed. The report named Thailand, Malaysia and Singapore as countries where QRIS already works, while quoting him as saying five ASEAN countries, so the current number is unclear. How QRIS would extend to the rest of the region under DEFA has not been explained.

What businesses can prepare

This section is our analysis, not a summary of DEFA's obligations, which will only be clear once the text is public. Whatever the final commitments, the areas DEFA covers point to work that sits inside a company's own systems.

• Map where customer and transaction data goes: which systems send personal data outside Indonesia, under what basis, and who can show it on request. This is needed under national rules whatever DEFA says.
• Check whether contracts, invoices and trade documents can be issued, signed and stored electronically in a form partners in other ASEAN countries can verify.
• Review payment integrations: whether adding a new country or a cross-border QR scheme means a configuration change or a rebuild of the checkout and settlement flow.
• Design partner and marketplace interfaces so that new regional partners can be connected through documented, secure APIs rather than one-off projects.

What to watch next

Watch the 49th ASEAN Summit in Manila in November for the signing itself and for the publication of the text, which will show which provisions are binding and which are cooperative. After that, watch Indonesia's ratification within the targeted 180 days, and whether Komdigi, Bank Indonesia and OJK adjust rules on data transfers, electronic documents and cross-border payments to match. In our view, the companies that benefit first will be those whose data, documents and payments can already cross a border cleanly, since the agreement lowers barriers between countries but cannot fix systems that were built for one market only.