The part you keep.

Parent and caregiver pack

• Put the agreement somewhere visible. An agreement in a drawer is a document; on a wall it is a norm.
• Do the weekly ten minutes in the car, on a walk, or while cooking. Sitting a child down opposite you makes it an event.
• Ask before you post a photo of them, out loud, where they can hear you asking.
• Follow the device-free times yourself. They are watching that more closely than they are listening to the rule.
• Your goal is not zero risk. Your goal is earlier help.

School staff pack

• Find your school’s current written safeguarding procedure and read it before you need it.
• Write the designated contact’s name and number in your help plan today.
• Record only what the procedure requires, in the school’s own system, on the day.
• Keep the staff room, the teacher chat and the class group out of every case.
• A disclosure is not an invitation to investigate alone.

Helping professional pack

• Support first. Investigate only within your role.
• Reduce retelling: each additional full account increases distress without improving the outcome.
• Assess immediate risk within your professional scope, and coordinate referrals rather than absorbing the case.
• Check that your referral routes and their contact details are current, on a schedule.
• Your value is not in extracting every detail. It is in the child feeling believed and knowing what happens next.

Facilitator pack — thirty minutes that works

• Open with the disclosure scenario. Have participants choose the adult’s first sentence, out loud, before any teaching.
• Teach TENANG only after they have felt the cost of getting the first sentence wrong.
• Run one grooming or harassment scenario, then the evidence scenario. Do not run more than two.
• Have every participant save one help route and write one if–then commitment before they leave.
• Close with the question: “What will you do differently the next time a child begins with, ‘Please do not get angry’?”

Trusted adult pack

• Children often choose the adult who cannot ground them, mark their work, or take their phone. That is an advantage.
• Save one number in your phone today. The route you have not saved is the route you will not use.
• Agree with the child what you will and will not pass on, before there is anything to pass on.
• You are not required to solve it. You are required to keep them safe, keep them talking, and bring in the right help.

Capture

• Take a screenshot of the whole screen, not a crop, so the account name, the time and the app are all in the same image.
• Save the account name or handle exactly as it is spelled, including lookalike characters.
• Save the profile link and the post link as text.
• Keep the message text in full and unedited.
• Write down which app it happened in, and which app it moved to.
• Capture before you report, because reporting can make the post disappear.
• Keep the report reference number, because it is the only proof that you reported.

The log

• Keep one simple log per child, not one per app: the date and time, what happened in plain words, where it happened, what you did, and who you told.
• Record facts and quotations, not conclusions about who is guilty.
• If you are school staff, keep it in the school’s own record system rather than on your personal phone.
• Never put an image in the log. Write “image reported to [service], reference [number]” instead.

Accounts

• Do not delete the account. It usually holds the only record of what happened.
• Do not delete the conversation. Blocking is not deleting, and you can block without losing the history.
• Block after you have captured what you need, not before.
• Change the password on the recovery email or phone number first, then on the account.
• Never send a password or a one-time code to anyone. Passwords and codes are not proof of love, friendship or authority.

1. Safety first, before paperwork. If the student is not safe right now, leave the internal path and use Polri 110 or 119.
2. Receive the disclosure well. Listen, thank them, say they are not in trouble, and ask only enough to judge urgency.
3. Tell the student what happens next, and name who you have to involve, before you contact them.
4. Escalate to the designated safeguarding role at your school, the same day.
5. The safeguarding role notifies leadership according to the current written procedure.
6. Record the incident in the school’s official system, on the day, to the extent the procedure requires.
7. Inform the family, unless the procedure or a protection service advises otherwise because a family member may be involved.
8. Arrange support for the student, and agree who checks in with them and when.
9. Review the follow-up, confirm the harm has stopped, and record what was done.

When the school path is not enough

• A student is in danger now, is injured, or is talking about ending their life.
• There is violence, sexual abuse or sexual exploitation of a student.
• Anyone outside the school is grooming or sexually pressuring a student.
• Sexual images of a student exist, are circulating, or are being used as leverage.
• The person of concern is a member of staff, or is the person the procedure would normally escalate to.
• The harm continues after the internal steps are complete.
• A family member may be involved, so informing the family first could increase the risk.

Indonesia has national rules on protecting children in electronic systems.

There are national rules covering how online services must treat children. This card names the current ones and the date we checked them.

As at the review date: Government Regulation No. 17 of 2025 on child protection in electronic systems, with its implementing regulation Permen Komdigi No. 9 of 2026, promulgated on 6 March 2026.

Why it ages: Regulations are amended, replaced and renumbered, and implementing rules change faster than the laws above them.

Child accounts are restricted on platforms classified as high risk.

Indonesia restricts child accounts on platforms that are classified as high risk. The age threshold and the phase-in are set by regulation, so check the current threshold rather than quoting one from memory.

As at the review date: implementation began on 28 March 2026, applying to children under 16 on platforms in the first high-risk phase.

Why it ages: Age thresholds, phase-in dates and the classification method can all change independently of each other.

Which platforms are covered is decided by classification, and it changes.

Never work from a memorised app list or an old screenshot. Which services are covered is a classification decision that is revised, and apps are renamed, merged and added.

As at the review date: the first phase named a small number of large platforms. We deliberately do not reproduce that list here, because it is the part most likely to be out of date by the time you read it.

Why it ages: A list baked into a lesson becomes wrong quietly, and adults keep teaching it for years.

A platform’s own minimum age is not the same thing as the law.

Two separate things decide whether a child may use a service: the platform’s own terms, and the rules that apply in Indonesia. Either can change, and neither settles the question on its own.

As at the review date: “everything is simply 13 and over” is not accurate for Indonesia.

Why it ages: The 13-and-over figure is widely repeated, easy to remember, and increasingly wrong.

Schools operate under a national school-safety framework that now includes digital safety.

Follow your school’s current written procedure rather than a workflow you remember from earlier training. The named bodies and their duties are set by regulation and have changed.

As at the review date: Permendikdasmen No. 6 of 2026 on a safe and comfortable school culture, which replaced the 2023 regulation and explicitly includes digital safety.

Why it ages: School safeguarding architecture is rewritten with each regulation, and older training decks still teach the previous committee names as current.

Indonesia’s electronic information law has been amended more than once.

Cite the current version from this card rather than the version in older training slides, and remember that this course does not teach legal diagnosis.

As at the review date: Law No. 1 of 2024, the second amendment to Law No. 11 of 2008.

Why it ages: Material written before 2024 still presents the 2016 amendment as the endpoint.

Indonesia has a personal data protection law.

A child’s personal data is protected by law, which matters both for what schools hold and for what adults publish about children.

As at the review date: Law No. 27 of 2022 on Personal Data Protection.

Why it ages: Implementing regulations, enforcement bodies and transition periods continue to develop after a law comes into force.

Sexual violence law can apply to online sexual exploitation of a child.

Online sexual exploitation of a child is not a lesser category of harm, and specialist legal support exists. Your job is to recognise that the case has exceeded your role, not to name the offence.

As at the review date: Law No. 12 of 2022 on Sexual Violence Offences.

Why it ages: Implementing regulations and institutional duties develop after enactment, and the useful behaviour for a non-specialist does not change with them.

Help numbers and service mandates are checked on a schedule.

The numbers in this course are the ones current at the review date shown here. If a number does not connect, use the other route on the card, and tell us.

As at the review date: SAPA 129 on 129 and WhatsApp 08-111-129-129; Polri 110; Ambulance 119.

Why it ages: Service numbers, operating hours and the organisations behind them change, and local offices change most often of all.

This course teaches first-line safeguarding, not legal diagnosis.

Indonesian law and institutional duties may require additional actions depending on the incident and your professional role. Use the current policy references and your own institution’s safeguarding procedure, and do not try to classify an offence yourself.