Due Diligence for Foreign M&A in Indonesia: Legal Checklist, Regulatory Approvals & Common Red Flags

Foreign M&A due diligence in Indonesia is a document-intensive verification process in which sequencing and regulator engagement matter greatly. For prospective foreign investors, in-house counsel and corporate buyers weighing an Indonesian acquisition, the practical effect is a staged verification exercise where confirming corporate records, satisfying foreign investment compliance obligations, and anticipating regulatory approval triggers all shape deal timing. This guide sets out a lawyer-grade, step-by-step legal roadmap: a full due diligence checklist, an approvals matrix mapping each regulator to its trigger and typical timeline, and the red flags that most often delay or defeat inbound transactions. It is written for corporate teams who need clarity on what to check, when to file, and where deals typically break down.

Quick summary, what foreign buyers must know about Indonesian M&A

Before you commit resources to a target, keep these headline points in view. Each is expanded later in this guide, with reference to the primary regulators and statutes.

• The legal baseline continues to evolve. Indonesia’s corporate and investment framework, centred on Law No. 40 of 2007 on Limited Liability Companies (as amended, including by the Job Creation Law) and Law No. 25 of 2007 on Investment, is regularly supplemented by implementing regulations affecting corporate records maintenance, foreign investment registration and the events that trigger regulatory approval or re-registration. Verify the current text and effective dates directly on the official national regulations repository.
• Several approvals dominate most deals. The Ministry of Investment / BKPM governs foreign investment registration and sectoral eligibility; the KPPU governs merger control and competition; and the OJK governs acquisitions in the banking, insurance, financing and other financial-services sectors. Sector regulators and Bank Indonesia may add further layers.
• Timing is non-linear. Different approvals run on different clocks and some are post-closing notifications rather than pre-closing conditions. Build your conditions precedent and long-stop date around the slowest regulator on your critical path.
• First steps. Engage local counsel early, obtain company registry data from the Directorate General of General Legal Administration (AHU), and map the target’s sector against foreign ownership limits before drafting any conditions precedent.

How to use this checklist, sequencing, team and data requests

Effective foreign M&A due diligence in Indonesia is a staged exercise, not a single document dump. Structuring the work into phases controls cost, focuses attention on deal-critical issues early, and gives you room to renegotiate price or walk away before you are contractually committed.

Who should lead due diligence

Assemble a coordinated team rather than a single adviser. In practice, a well-run inbound acquisition draws on:

• Lead transaction counsel. Usually the acquirer’s principal legal adviser, responsible for deal structure, the share purchase agreement and overall risk allocation.
• Indonesian local counsel. Essential for corporate registry work, sectoral licensing analysis and regulator engagement. Indonesian-qualified advocates must handle Indonesian court and regulatory representation, and the advocate profession is regulated under Law No. 18 of 2003 on Advocates.
• Tax advisers. To review tax audit history, transfer pricing, VAT and customs exposure, which are among the most common sources of undisclosed liability.
• Regulatory and compliance specialists. For sector-specific licensing, anti-corruption, environmental and data protection review.

Suggested timelines and staging

A disciplined sequence keeps the process controllable:

1. Desktop phase. Review available registry data, financial statements and sector eligibility. Confirm the target is legally capable of foreign ownership before spending on deeper work.
2. In-country phase. Detailed document review in the data room, site visits where relevant, and management interviews. This is where the full legal due diligence checklist below is executed.
3. Conditional agreement signing. Execute the acquisition agreement with conditions precedent covering all outstanding regulatory approvals and consents identified during review.
4. Closing and post-closing. Satisfy conditions, complete the transfer, and attend to registration and administrative filings.

Legal due diligence checklist for foreign M&A in Indonesia (step-by-step)

This is the operational core of any foreign M&A due diligence exercise. Work through each document group methodically, cross-referencing what the target discloses against what the official registers show. Discrepancies between the two are often more revealing than any single document. Treat every “clean” section with mild suspicion until you have independent corroboration from a registry, a regulator or a third party.

Corporate formation & shareholder structure

Begin with the constitutional documents. Obtain the deed of establishment and the current articles of association (Anggaran Dasar) together with any amendments, and reconcile the version in the data room against the record held at the Directorate General of General Legal Administration (AHU) under the Ministry of Law. Key items to verify:

• Authorised, issued and paid-up capital, and whether capital contributions were actually made.
• The complete chain of shareholders and any share transfer restrictions, pre-emption rights or lock-ups in the articles or shareholders’ agreements.
• Beneficial ownership, including nominee arrangements. Nominee structures used to disguise foreign ownership in restricted sectors are a serious red flag; under Indonesian law such nominee arrangements over shares are prohibited and can render the arrangement void.
• Any encumbrances over shares, such as pledges or fiduciary security, that would prevent a clean transfer.

Corporate records & registers to check

A corporate records check should be exhaustive because gaps here undermine the validity of everything that follows. Foreign buyers frequently underestimate how much turns on properly executed and filed corporate housekeeping. Obtain and examine:

• Shareholder register and share ownership records. Confirm they match the AHU filings and the articles.
• Minutes of general meetings of shareholders and board resolutions. Check that material decisions, capital changes, director appointments, significant contracts, were validly approved and recorded.
• Powers of attorney. Identify who is authorised to bind the company and whether any authority has lapsed or exceeded its scope.
• Business identification number (NIB) and business licensing. Confirm current, valid registration on the Online Single Submission (OSS) system administered by the Ministry of Investment / BKPM.
• Tax registration (NPWP) and correspondence. Verify the tax identity and standing.
• Operational permits and licences. Confirm each is current, in the company’s name, and, critically, transferable or survivable on a change of control.

Confirm that the target’s registers have been kept and updated in line with the current requirements under the Company Law and its implementing regulations. Historic non-compliance in registry filings is one of the most common findings in legal due diligence in Indonesia and can require corrective filings before closing.

Contracts & commercial

Review all material contracts and, above all, hunt for change-of-control provisions. In an Indonesian acquisition, a single unaddressed consent clause in a key supply, distribution, financing or customer contract can hold up closing or trigger termination. Focus on:

• Change-of-control and assignment clauses requiring counterparty consent.
• Customer and supplier concentration, dependence on one or two counterparties is a commercial and legal vulnerability.
• Financing agreements with cross-default, mandatory prepayment or change-of-control acceleration.
• Termination rights, exclusivity, non-compete and most-favoured-nation clauses that survive the deal.

Property and real estate

Land rights in Indonesia are technical and foreign-ownership-sensitive. Verify each site the target uses:

• The category of land right held, such as Right to Build (Hak Guna Bangunan/HGB), Right to Cultivate (Hak Guna Usaha/HGU) or Right to Use (Hak Pakai), and its remaining term and renewal position.
• Whether the right is registered in the company’s name and free of encumbrances, verified against the National Land Agency (BPN / Ministry of Agrarian Affairs and Spatial Planning) records.
• Site-specific permits, including building and operational permits tied to the location.
• Any mismatch between the land right category and the intended post-acquisition use.

Employment & labour

Labour liabilities are often larger than buyers expect. Review employment contracts, any collective labour agreement, and the target’s compliance with statutory obligations under the Manpower Law (Law No. 13 of 2003, as amended by the Job Creation Law) and its implementing regulations. Pay particular attention to:

• Termination and severance exposure, which can be substantial under Indonesian law.
• Fixed-term versus permanent employment classification and any misclassification risk.
• Pension, benefits and social security contributions (BPJS Ketenagakerjaan and BPJS Kesehatan), including arrears.
• Outsourcing arrangements and any pending industrial relations disputes.

Tax & customs

Tax is a recurrent source of hidden liability in foreign M&A due diligence in Indonesia. Obtain the target’s tax returns, tax audit findings, correspondence with the Directorate General of Taxes, and any outstanding assessments or disputes. Verify:

• The status of any open or recently closed tax audits.
• Transfer pricing documentation for related-party transactions.
• VAT compliance and, for importers or exporters, customs classification and duty exposure.
• Withholding tax compliance on cross-border payments.

IP, IT & data protection

Confirm that trademarks, patents and other registrable rights are properly registered in the target’s name with the Directorate General of Intellectual Property and not lapsed. Review IT licences and, increasingly important, the target’s handling of personal data under Law No. 27 of 2022 on Personal Data Protection, including any cross-border data transfers, which carry their own compliance obligations. Undocumented reliance on third-party or personally owned IP is a frequent gap.

Environmental, health & safety

For industrial, mining, energy and manufacturing targets, environmental compliance can create long-tail liability. Check environmental approvals (including the environmental approval / AMDAL or UKL-UPL where applicable), any history of enforcement action, remediation obligations, and the condition of the site. Successor liability for historic contamination should be specifically allocated in the acquisition agreement.

Litigation & disputes

Identify all pending and threatened litigation, arbitration and regulatory proceedings. Review the target’s exposure and reserves, and confirm the enforceability of dispute-resolution clauses in key contracts. The Supreme Court’s decisions portal is a useful reference point when assessing how Indonesian courts have treated comparable share transfer disputes and minority shareholder claims, which helps you gauge litigation risk realistically.

Regulatory approvals & notifications for foreign M&A in Indonesia, who, when and thresholds

Mapping the regulatory approvals for Indonesian M&A is where deals succeed or stall. Each regulator has its own trigger, clock and penalty regime, and some require pre-closing approval while others require post-closing notification. The matrix below summarises the principal gatekeepers. Always confirm current thresholds, timelines and fees directly on each regulator’s official pages, because these are periodically revised.

BKPM / foreign investment registration and sector eligibility

Foreign investment compliance in Indonesia starts with confirming that the target’s business lines are open to foreign investment and, if so, at what ownership percentage. The Ministry of Investment / BKPM administers foreign investment licensing through the OSS system and publishes sectoral eligibility guidance derived from the prevailing investment list regulation. Foreign acquirers should pay close attention to registration and licensing obligations, verifying the required documents and steps on the OSS / BKPM portal. Confirm sector eligibility during the desktop phase, before you spend on deeper review, because a target operating in a restricted or closed activity can defeat the entire rationale for the deal.

KPPU / merger control and competition

KPPU notification is a standing item on every checklist. Indonesian merger control operates principally through a mandatory post-closing notification regime: where the qualifying transaction meets the asset or turnover thresholds set by regulation, the acquirer must notify the KPPU within the prescribed window after the transaction becomes legally effective. Failing to notify a qualifying deal exposes the acquirer to administrative fines. During due diligence you should model whether the combined asset and turnover figures cross the thresholds, calendar the notification deadline against the closing date, and identify any competitive overlap that could attract scrutiny. Confirm the current thresholds and process on the KPPU site, as these are updated from time to time.

OJK / financial sector approvals

OJK approval governs any deal touching a bank, insurer, financing company or other supervised financial institution. Here the regulator applies a prior-approval model with a fit and proper assessment of prospective controlling shareholders, directors and commissioners. Capital adequacy and ownership rules apply, and the process is more demanding and less predictable than a general commercial acquisition. If your target is a financial institution, treat OJK approval as the critical path, engage the regulator early through local counsel, and confirm the applicable procedures and fit and proper requirements on the OJK site.

Sector regulators (telecom, energy, mining)

Regulated-sector targets carry an additional dimension: the transferability of sectoral licences and the change-of-control triggers attached to them. In telecommunications, ownership caps, licence conditions and spectrum-related matters mean a change of control over a licensed operator typically requires sectoral consent, and market interest in Indonesian telecoms operators reflects how closely investors scrutinise these constraints. Similar considerations apply in energy and mining, where licence terms (such as mining business permits), local content and change-of-control provisions can materially affect deal feasibility. In every regulated sector, confirm whether the target’s core licence survives the acquisition and, if not, what consent is required.

Common red flags that can kill or materially delay a deal in Indonesia

Experienced practitioners watch for a recurring set of warning signs. Any one of these can slow a deal; several together should prompt a hard look at whether to proceed, renegotiate or walk.

Foreign ownership limits or untransferable permits

A target operating in a restricted sector, or holding permits that cannot be transferred or that lapse on a change of control, can undermine the deal outright. Mitigant: verify sector eligibility and licence transferability at the desktop stage and make regulatory consents a condition precedent.

Undisclosed regulatory breaches or missing approvals

Historic non-compliance, unregistered investment, missing sectoral approvals or lapsed permits, effectively transfers to the acquirer on a share deal. Mitigant: require corrective filings before closing and secure specific indemnities for known gaps.

Hidden tax liabilities and unresolved audits

Open tax audits, transfer pricing exposure and withholding tax shortfalls are among the most common undisclosed liabilities. Mitigant: obtain full audit history, hold back part of the price or use a specific tax indemnity.

Shareholder disputes and minority squeeze-out risks

Unresolved disputes among existing shareholders, or minority holders with blocking or nuisance rights, can obstruct a clean transfer. Mitigant: verify the shareholder chain against the register, obtain waivers of pre-emption, and review comparable court treatment of minority claims. Note that Indonesian company law does not provide a general statutory squeeze-out mechanism, so plan the acquisition structure accordingly.

KPPU and competition risks

A qualifying transaction that was never notified, whether the target’s own past acquisitions or the current deal, creates fine exposure and, where competition is harmed, potential remedies. Mitigant: audit the target’s notification history and calendar your own notification obligation.

Contract change-of-control consent gaps

Key contracts that require counterparty consent on a change of control can stall closing or trigger termination. Mitigant: identify every consent early and make obtaining the material ones a condition precedent.

Practical contract protections & deal mechanics for foreign buyers

Once due diligence has surfaced the risks, allocate them precisely in the transaction documents. Well-drafted protections convert diligence findings into enforceable comfort.

Sample condition precedent checklist

Conditions precedent lock in the regulatory and consent position before you are obliged to complete. A robust set typically includes:

• Receipt of all required regulatory approvals, foreign investment licensing, OJK approval where applicable and any sectoral consents.
• Confirmation that any mandatory KPPU notification path is understood and calendared.
• Obtaining material third-party consents under change-of-control clauses.
• Corrective corporate and registry filings to cure any historic non-compliance identified in the corporate records check.
• No material adverse change and bring-down of key warranties at closing.

Indemnity and price adjustment drafting tips

Use specific indemnities for identified risks, particularly tax, environmental and regulatory compliance, rather than relying solely on general warranties. Where the diligence reveals quantifiable but uncertain exposure, consider a purchase price adjustment or an escrow retention pending resolution. Align the survival periods of tax and environmental indemnities with the realistic tail of those liabilities.

Using W&I insurance versus escrow in Indonesia

Foreign buyers increasingly weigh warranty and indemnity insurance against a traditional escrow. W&I insurance can shift warranty risk to an insurer and preserve a clean exit for sellers, but insurers price and scope coverage based on the quality of the diligence, thin diligence produces exclusions. Escrow remains simple and effective for discrete, identified risks. The likely practical effect for many inbound deals is a hybrid: escrow or specific indemnity for known issues, with W&I insurance covering unknown warranty breaches, provided the underlying due diligence is thorough enough to satisfy the underwriter.

Closing checklist & post-closing registration / integration steps

Completion is not the end of the legal work. Foreign acquirers must attend to a sequence of administrative and registration steps to perfect the transaction and keep the target compliant. Build a responsibility matrix so each item has an owner and a deadline.

• Corporate register updates. Record the share transfer in the shareholder register and file the relevant amendments (or notification) with the AHU under the Ministry of Law.
• Investment and licensing records with BKPM. Complete any required updates to the target’s investment and licensing records through the OSS system; confirm the required documents on the OSS / BKPM portal.
• KPPU notification. Where the transaction is notifiable, file within the prescribed window after the deal becomes legally effective.
• Regulatory and sectoral licence transfers. Effect any licence transfers or change-of-control consents that were conditioned on completion.
• Tax registrations. Update tax records to reflect the new ownership and any structural changes.
• Labour notifications. Attend to any employee-related notifications arising from the change of control.

Because these obligations and their timing are shaped by regulation that is periodically updated, verify the current requirements against the official regulations repository and the relevant regulator pages before finalising your post-closing plan.

Appendix, sample document request list (DRL) and due diligence templates

A structured document request list keeps the target focused and gives you a checklist against which to test completeness. A practical DRL for foreign M&A due diligence in Indonesia should be organised by the same document groups used above:

1. Corporate formation: deed of establishment, articles of association and all amendments, AHU records.
2. Corporate records: shareholder register, GMS minutes, board resolutions, powers of attorney, NIB / business licences, tax registration.
3. Licences and permits: all operational, sectoral and site-specific permits with proof of currency.
4. Material contracts: customer, supplier, financing, distribution and lease agreements, flagged for change-of-control clauses.
5. Real estate: land right certificates, encumbrance records, building and operational permits.
6. Employment: contracts, collective agreements, benefit and social security records, dispute files.
7. Tax: returns, audit findings, correspondence, transfer pricing documentation.
8. IP, IT and data: registrations, licences, data processing and cross-border transfer records.
9. Environmental: approvals, enforcement history, remediation records.
10. Litigation: pending and threatened proceedings, judgments, settlements.

Conclusion & recommended next steps

Foreign M&A due diligence in Indonesia rewards buyers who sequence their work, verify records against the primary registers, and map every regulatory approval before drafting conditions precedent. Disciplined corporate records review and timely investment and licensing updates matter greatly, while KPPU, OJK and sectoral approvals remain the levers most likely to determine deal timing. Use the checklist, approvals matrix and red-flag playbook above as your framework, confirm every threshold and deadline against the official regulator sources, and secure tailored legal advice on structure and risk allocation before you commit to any Indonesian acquisition.

Sources

1. Peraturan.go.id, Official repository of national regulations
2. Online Single Submission (OSS), Ministry of Investment / BKPM
3. Ministry of Investment / BKPM
4. KPPU, Business Competition Supervisory Commission
5. Otoritas Jasa Keuangan (OJK)
6. Directorate General of General Legal Administration (AHU), Ministry of Law
7. Mahkamah Agung (Supreme Court), Decisions portal
8. Bank Indonesia