DIRECTOR CHANGE RISKS
Changing Directors in Indonesia: Compliance Risks Guide
A decision-led briefing on obsolete authority, missed corporate filings, bank access, immigration, tax, and operational continuity, for foreign investors who need evidence they can verify before acting in Indonesia.
Director changes create risk when the corporate decision, AHU record, operating systems, and real access do not change together. An outgoing director may retain bank tokens, email, tax, OSS, signature powers, records, or customer authority; an incoming director may be appointed but unable to pass KYC or immigration checks. A controlled sequence must protect both legal validity and business continuity. The safe sequence is to confirm the exact facts, identify the authority or institution that decides each stage, collect evidence in the form that recipient accepts, and assign corrections before money or authority moves. Founders should preserve the source data, official output, access credentials, payment trail, and change history so the company can demonstrate the basis for its decision later.
Key takeaways
- Director changes create risk when the corporate decision, AHU record, operating systems, and real access do not change together.
- Build the authority cutover from current official requirements and recipient-accepted evidence.
- Treat the authority cutover as incomplete until its corporate, regulatory, payment, and operating records agree.
- Keep official outputs, source data, payments, credentials, and unresolved conditions under company control.
Sequence the director change across corporate and operating systems
A director change begins with eligibility, consent, the correct shareholder decision, notarial documentation, and submission through the current AHU framework under Minister of Law Regulation 49 of 2025 . The effective corporate date, AHU acceptance, and third-party recognition should be recorded separately. The outgoing director should not continue to sign merely because a bank, tax, or OSS profile has not yet been updated. For the authority cutover, the immediate acceptance point is to document the effective basis against the documented eligibility, consent, resolution, and deed.
Map every dependent record before the meeting: AHU, OSS responsible person and contacts, NIB and licenses, tax account, bank mandates and tokens, payroll, immigration and manpower approvals, contracts, e-signatures, email, government portals, insurance, litigation authority, accounting approvals, and physical assets. Use a controlled overlap where lawful, but assign a cut-off time for each power. Obtain handover certificates, revoke unused powers of attorney, and keep evidence that counterparties and institutions received the change. Within the authority cutover file, the responsible officer should preserve AHU, OSS, tax, bank, licenses, and immigration as evidence for the decision to track each institution.
Director-change sequence
Approve
Eligibility, consent, resolution, and deed
Document the effective basisUpdate
AHU, OSS, tax, bank, licenses, and immigration
Track each institutionCut over
Authority, credentials, assets, and notices
End obsolete accessValidate the evidence before the next commitment
Convert the open questions into a dated review file with named owners, accepted evidence, and a clear stop condition.
Trace signing power from the deed to the specific transaction
A director's title does not answer every authority question. Start with the Indonesian Company Law , the articles of association, current AHU record, shareholders' or board resolutions, reserved matters, transaction thresholds, joint-signature rules, conflicts, and any lender, license, or shareholder-agreement condition. Then identify the legal act: an ordinary contract, property commitment, financing, guarantee, bank instruction, employment action, notarial deed, tax filing, OSS declaration, or delegated power can require different evidence. For the authority cutover, the immediate acceptance point is to match the transaction against the documented board or shareholder resolution and limits.
Prepare an authority certificate for material transactions that states the company, current directors, relevant constitutional clause, approval body, resolution date, signatory combination, financial limit, validity, and exclusions. Compare it with the counterparty's original or independently verified corporate documents. A specimen signature, business card, email, or possession of a company stamp is not enough. Where authority is delegated, inspect the power of attorney, authentication, substitution right, expiry, revocation, and whether the principal retained the power to grant it. Within the authority cutover file, the responsible officer should preserve signer, joint rules, and power of attorney as evidence for the decision to verify before commitment.
Control the assignment after the foreign employee arrives
Approval is the start of the compliance cycle. The company must keep the employee within the permitted employer, position, locations, and activities; maintain passport and stay-permit records; operate payroll and withholding; fulfill reporting and local-counterpart obligations where applicable; and monitor business travel, remote work, secondments, renewals, role changes, and termination. Access to bank, OSS, tax, customer, or plant systems should match corporate authority and the approved job. For the authority cutover, the immediate acceptance point is to close every dependency against the documented approvals, access, assets, and records.
The continuing employer duties and sanctions framework appears in Government Regulation 34 of 2021 . Keep an assignment register with approval dates, permitted scope, payroll owner, tax analysis, insurance, family status, reporting dates, and exit tasks. When employment ends, revoke company authority and credentials, complete payroll and tax closure, return assets, update the organization chart, and process the relevant immigration or manpower changes rather than allowing an expired role to remain active in corporate systems. Within the authority cutover file, the responsible officer should preserve permitted role, employer, and work sites as evidence for the decision to supervise actual conduct.
Assignment lifecycle
Operate. Permitted role, employer, and work sites; supervise actual conduct.
Maintain. Payroll, tax, reports, and renewals; calendar each duty.
Exit. Approvals, access, assets, and records; close every dependency.
Resolve the decision gaps before filing
Reconcile the corporate, regulatory, payment, and operating facts before they become amendments or rejected submissions.
Prepare for the bank's independent KYC and account decision
A corporate bank account is not issued automatically because the PT PMA has an AHU approval, NPWP, or NIB. The bank independently assesses the company, beneficial owners, shareholders, directors, signatories, business purpose, licenses, address, contracts, expected transactions, currencies, source of funds and wealth, tax residence, sanctions and risk factors, and original-document or presence requirements. Criteria can differ by bank and branch. For the authority cutover, the immediate acceptance point is to use final outputs against the documented deed, AHU, tax, NIB, licenses, and address.
Build one KYC file that reconciles the executed deed, AHU corporate output , tax data, OSS licenses, UBO report, ownership chart, passports, corporate-shareholder documents, address evidence, business plan, contracts, and funding narrative. Ask the chosen bank for current requirements in writing, but preserve a fallback institution and visit plan. Before the first remittance, approve signatory combinations, online access, token custody, payment limits, beneficiary controls, accounting evidence, and how paid-up capital will be described and used. Within the authority cutover file, the responsible officer should preserve UBO, shareholders, directors, and signatories as evidence for the decision to complete KYC.
Bank onboarding
| Control | Evidence | Decision |
|---|---|---|
| Company | Deed, AHU, tax, NIB, licenses, and address | Use final outputs |
| People | UBO, shareholders, directors, and signatories | Complete KYC |
| Account | Access, limits, funding, and evidence | Control before deposit |
Move from the deed to OSS in dependency order
The incorporation workflow should move from approved source data to name, deed, legal-entity approval, tax data, and OSS licensing. Each output becomes an input for the next system, so a correction to shareholders, address, capital, or activity can create work across several records. Release control should sit with the investor or an authorized company officer, not solely with the filing agent. For the authority cutover, the immediate acceptance point is to confirm data and filing owner against the documented entity tax registration and access.
Use AHU business-entity services for the corporate record and the OSS framework under Government Regulation 28 of 2025 for risk-based business licensing. After each submission, compare the official output with the approved data sheet. Record the identifier, issue date, responsible account, downloadable evidence, corrections, and next dependency before marking a stage complete. Within the authority cutover file, the responsible officer should preserve NIB and applicable standards or permits as evidence for the decision to check operational status, not number alone.
Dependency sequence
Corporate
Name, deed, and AHU approval
Verify legal identity and governanceTax
Entity tax registration and access
Confirm data and filing ownerLicensing
NIB and applicable standards or permits
Check operational status, not number aloneEnd the outgoing director's authority without leaving the company unable to act
The approval decision for the authority cutover should name the selected route, responsible company officer, accepted source data, supporting documents, official outputs, payment limits, unresolved conditions, and the event that permits the next commitment. For obsolete authority, missed corporate filings, bank access, immigration, tax, and operational continuity, a conditional result should remain a visible gate rather than being absorbed into a broad statement that setup is complete.
The founders or board should sign a short authority cutover mandate that records the current facts, authority, required corrections, evidence location, system and credential owners, review date, and first transaction that the company intends to perform. The working file should connect legal identity, ownership, governance, activity, capital, premises, licensing, tax, banking, immigration, and real conduct wherever those facts are relevant. Recheck current official and institution-specific requirements immediately before filing, funding, signing, employing, or operating.
Put the approved route under company control
Record the decision, authority, documents, access, payment limits, and follow-up calendar in one owner-approved mandate.
Frequently asked questions
What is the biggest operational risk in a director change?
A gap or overlap in usable authority can stop payments and filings or permit unauthorized action. Define institution-specific cut-off and activation evidence.
Can one director sign every PT PMA transaction?
Only if the current articles, approvals, joint-signature rules, limits, conflicts, and transaction-specific requirements allow it.
Should bank mandates match the deed exactly?
They should be supported by current corporate authority, but banks apply their own mandate forms, KYC, limits, and activation procedures.
How should emergency authority be handled?
Adopt defined succession, temporary delegation, approval, access, and revocation procedures before a director becomes unavailable.
What should be checked before relying on a resolution?
Verify the correct corporate body, notice and quorum, voting, conflicts, scope, date, signatures, supporting deed provisions, and any later revocation or amendment.
