Indonesia’s New Outsourcing Regulation (2026): Who It Affects and Who It Doesn’t

Indonesia changed its outsourcing rules this year, and almost nobody outside a handful of law firm client alerts has written about it in English. If you work with Indonesian talent through an agency, or you are deciding between an agency and hiring someone directly, the new regulation is worth twenty minutes of your attention. It redraws the line around what Indonesian outsourcing companies are allowed to supply, and white-collar remote work is on the wrong side of that line.

Here is what the regulation says, who it touches, and who it leaves alone.

What Regulation No. 7 of 2026 actually does

On 30 April 2026, Indonesia’s Ministry of Manpower issued Regulation No. 7 of 2026. According to the summary published by the law firm network L&E Global (leglobal.law, May 2026), the regulation limits outsourcing arrangements to six categories of supporting services:

• Cleaning services
• Food and beverage services
• Security services
• Drivers and transport
• Operational support
• Support services in mining, oil and gas, and electricity

Read that list again with a remote-hiring lens. Virtual assistant work, bookkeeping, marketing, and software development all fail to appear on it. The core of what Western businesses actually buy from Indonesia sits outside the six permitted categories.

The regulation governs Indonesian entities that engage outsourcing vendors, meaning the classic BPO or staffing-agency model where a company contracts a vendor and the vendor supplies workers. That scoping matters, and we will come back to it, because it determines who needs to worry and who does not.

Outsourcing vs direct contracting, in plain terms

The two models get lumped together in casual conversation, but legally they are different animals.

Outsourcing (the agency or BPO model) means you pay an Indonesian company, and that company employs the workers. The worker’s employment contract is with the vendor. The vendor handles payroll, takes a margin, and answers to Indonesian labor law as the employer. Indonesia has regulated this model for years because it has a long history of vendors using it to avoid the obligations of direct employment.

Direct contracting means you, the foreign business, engage an Indonesian professional yourself as an independent contractor. There is no vendor in the middle. The person invoices you, you pay them, and the commercial relationship is between the two of you. If you have read our piece on whether you need an EOR to hire Indonesian contractors, this is the model we argue most small businesses should default to.

Regulation No. 7 of 2026 is aimed at the first model. It regulates what Indonesian companies can procure through outsourcing vendors inside Indonesia.

Who is affected

If you buy staffed services from an Indonesian agency or BPO, this regulation now sits somewhere in your supply chain. The entity engaging the outsourcing vendor in Indonesia is the one the regulation governs, and the six-category limit defines what that arrangement can lawfully cover.

The practical exposure runs through your vendor. An Indonesian outsourcing company supplying, say, bookkeepers or marketing staff is supplying a service category that does not appear on the permitted list. How Indonesian regulators will treat existing arrangements is not yet clear. The L&E Global summary does not detail penalties, and we have not seen verified information on transition arrangements for contracts signed before the regulation took effect. Anyone telling you exactly what the enforcement picture looks like is guessing, so we will not.

What we can say is that the structure many agencies use to supply white-collar staff now carries regulatory question marks it did not carry before 30 April 2026. That is our reading of the situation as employers, not the regulation’s own text, and you should weigh it accordingly.

Who is not affected

Here is the part that matters most for a Western small business: per the same L&E Global summary, direct engagement of an Indonesian contractor by a foreign company sits outside the regulation’s scope. The regulation governs Indonesian entities engaging outsourcing vendors. A US or European business contracting directly with an Indonesian professional is not an Indonesian entity engaging an outsourcing vendor, so the six-category limit simply does not apply to that relationship.

If you found this article because you already hire, or plan to hire, an Indonesian virtual assistant or developer directly, nothing in Regulation No. 7 of 2026 changes your setup. You still handle the same things you handled before: a clear contract, a sensible way to pay them, and a W-8BEN if you are a US business.

What to ask your agency if you use one

If your Indonesian staff come through a vendor, this is a reasonable moment for a direct conversation. Questions worth putting in writing:

1. Under Regulation No. 7 of 2026, which of the six permitted service categories does our arrangement fall under? If the honest answer is none, ask what their plan is.
2. Is the structure actually outsourcing under Indonesian law, or something else? Some vendors operate as employers of record or staffing intermediaries with different legal footings. Make them explain which they are and why the new regulation does or does not reach them.
3. What happens to our contract if the arrangement has to be restructured? You want to know whether your workers would be moved to a different structure, and what that does to continuity and cost.
4. Can we transition to engaging the workers directly? Some agencies allow buyouts. If the people are good and the structure is now uncertain, converting them to direct contractors is a clean exit.

A competent vendor will have thought about all four. Vague reassurance is itself an answer.

The bigger picture for a Western buyer

Our view, stated plainly as opinion: this regulation strengthens the case for direct contracting that already existed on cost grounds. The agency model for Indonesian white-collar work now stacks a regulatory uncertainty on top of the margin you were already paying, while the direct model is untouched, cheaper, and gives the worker all of what you pay.

Direct contracting is not effortless. You take on sourcing, vetting, and the relationship itself, work an agency would otherwise do for its fee. But those are solvable problems for a small business, and they were solvable before this regulation made the alternative murkier. If you want to see what the direct route looks like in practice, you can browse Indonesian remote workers directly and contact them yourself, no intermediary in the structure at all.

What we still don’t know

Honesty requires a short list of open questions. We have not seen verified detail on penalties for non-compliant arrangements. We have not seen verified transition rules for pre-existing contracts. And regulations of this kind often get implementing guidance later that softens or sharpens the original text. If you have material exposure through an Indonesian vendor, this article is a prompt to call a lawyer qualified in Indonesian labor law, not a substitute for one.

What is solid: the regulation exists, it was issued 30 April 2026, it limits outsourcing to six supporting service categories, white-collar remote roles are not among them, and direct engagement by a foreign company sits outside its scope. For most small Western employers, that last clause is the whole story. The simplest structure was already the cheapest one. It is now also the one the new regulation leaves alone.