inp.polri.go.id - Jakarta. PT Indonesian Railway (KAI) ensures that customer digital data remains safe and secure, safeguarded through system strengthening, implementation of international standards, and ongoing data protection governance.
"KAI continues to strengthen the security and confidentiality of customer data as the use of digital-based travel services expands," said KAI Vice President of Corporate Communication Anne Purba in a statement in Jakarta on Tuesday (8/4/2026).
This strengthening includes data protection policies, system security, access control, cyber incident handling, and providing clear information to customers regarding the use of their data.
According to her, digitalization has made the travel process easier, from schedule searches and ticket purchases to payments and travel management, all the way to the boarding process. This development needs to be accompanied by responsible data management.
"Customers entrust a significant amount of information to KAI when using digital services. We maintain this trust by strengthening systems, governance, employee competency, and continuously evaluating data protection mechanisms," she said.
Customer data protection policies are also communicated through the Privacy Policy section of Access by KAI. This information helps customers understand the types of data managed, their intended use, retention periods, and how to request data deletion.
This step aligns with the spirit of the 81st Anniversary of the Republic of Indonesia's Independence Day, "Indonesia is Sovereign, Just, and Prosperous." In the development of the digital economy and services, sovereignty is also related to the nation's ability to manage technology and safeguard public information responsibly.
According to KAI's internal data, from January to June 2026, 5,555,034 long-distance train customers used the Face Recognition Boarding Gate. This facility simplifies the boarding process because customer identity can be verified using facial data linked to their travel ticket.
"Registered customers do not need to re-present their boarding pass, e-boarding pass, or ID card to officers when passing through the Face Recognition Boarding Gate facility," he explained.
The use of Face Recognition is optional. Customers who choose this service must provide consent when registering through Access by KAI, the Check-in Counter machines at the station, or through a Customer Service officer.
"Customer consent is an essential part of the Face Recognition service. Customers can still use other available boarding mechanisms if they do not register their facial data," explained Anne.
Furthermore, KAI implements an Information Security Management System that meets the international standard ISO 27001. This standard serves as a reference for managing information security risks, regulating data access, and maintaining the confidentiality, integrity, and availability of information.
Governance is also strengthened through the establishment of a Computer Security Incident Response Team (CSIRT). This team is tasked with handling, coordinating, and responding to cybersecurity incidents.
(ad/inp/pr/rs)
