On July 21, 2025, Governor Wayan Koster personally oversaw the demolition of 48 illegal structures at Bingin Beach in Uluwatu — villas, restaurants, beach clubs, all reduced to rubble in a single morning. 500 enforcement officers. Excavators on the cliff edge. It was the most visible moment in a regulatory shift that had been building for years and that reached structural enforcement on March 31, 2026.
For the roughly 39,000 estimated unlicensed tourist accommodations on the island, the question is no longer whether compliance will matter — it does — but what compliance actually requires, how it intersects with operational infrastructure, and which parts of it the platform needs to handle versus which parts your lawyer handles.
This article is the engineering view. We walk through what Permenpar No. 6/2025 actually demands, how it stacks alongside PP No. 28/2025 and the broader regulatory framework, what the fiscal pillar looks like (PHR, PPN, PPh), which KBLI codes apply to which operations, what zoning rules disqualify a large share of Canggu villas, and — most importantly — what serious operators are building into their digital infrastructure to make compliance operational rather than reactive.
We are not lawyers. We do not handle PT PMA establishment, NIB applications, or zoning appeals. We build the engineering layer that makes compliance state operational data — license tracking, zoning verification, tax-ready reporting, foreign guest workflows, and audit-grade trails that survive an OTA verification request or a Bapenda spot audit.
This is what we have learned working alongside compliance partners and operators on the ground.
Key takeaways
| Point | Details |
|---|---|
| Permenpar 6/2025 enforces existing rules | The accommodation licensing requirements have existed since UU No. 10/2009. What changed in 2025–2026 is coordinated enforcement. |
| Five compliance gates run in sequence | Legal entity → KBLI → KKPR zoning → PBG/SLF building → verified NIB. Skipping a gate stalls the chain. |
| Zoning disqualifies many operators | Tourism Villa licenses (KBLI 55193) require Pink Zone. Roughly 80% of Canggu villas are estimated to sit in Yellow Zone. |
| OTAs now verify licenses against the Ministry database | Airbnb, Booking.com, Agoda, Expedia, VRBO — verification runs as a recurring cycle, not a one-time gate. |
| Three-layer tax load | PHR 10% local + PPN 12% (above IDR 4.8B turnover) + PPh structures. Combined effective load can exceed 30% of gross revenue. |
| Compliance is now operational data | Whether an NIB is "verified" or "pending" determines whether the listing appears on Airbnb today — it belongs inside the platform, not in a Notion page. |
01 · What actually changed in 2025–2026
Permenpar 6/2025 did not introduce new rules. It enforced existing ones.
The single most common misconception is that Permenpar No. 6/2025 introduced new rules. It did not. The accommodation licensing requirements have existed since at least UU No. 10/2009 on Tourism and the older Pondok Wisata framework in Permenpar 18/2016. What changed in 2025–2026 is coordinated enforcement of rules that were already on the books.
Three regulatory pieces converged:
- Government Regulation No. 28/2025 (PP 28/2025) — the Risk-Based Business Licensing framework (OSS-RBA) covering all business sectors including tourism accommodation.
- Ministry of Tourism Regulation No. 6/2025 (Permenpar 6/2025) — standards, supervision, and sanctions specifically for tourism businesses, signed by the Minister of Tourism.
- UU No. 18/2025 — the third amendment to the Tourism Law (effective late 2025), giving provincial enforcement legal teeth.
The result is integration. The Ministry of Tourism database now links directly to OTA platforms (Airbnb, Booking.com, Agoda, Expedia, VRBO). The OSS system is the canonical registry. The Directorate General of Taxes (DGT) cross-checks OTA-reported revenue against licensing status and NPWPD records. A property that operated for 5 years without a verified NIB is no longer quietly invisible — it appears in a database, and that database gets queried.
On December 8, 2025, the Minister of Tourism issued a circular addressed to OTA platforms directing them to verify the license status of listed properties. Airbnb began contacting hosts shortly after: "Upload your NIB or face delisting." The March 31, 2026 deadline was when verified-license enforcement formally activated.
Operators with an estimated 39,000+ unlicensed listings now face one of three outcomes: complete compliance (operational), delisting (loss of primary booking channel), or in the most visible cases, demolition.
02 · The Bingin Beach demolition — what it actually signaled
On July 21, 2025, Governor Koster, accompanied by Badung Regent I Wayan Adi Arnawa, led the demolition of 48 structures at Bingin Beach, Pecatu Village, South Kuta District, Badung Regency. The buildings — villas, hotels, homestays, restaurants, and tourism facilities — were constructed without proper permits on state-owned land in a designated green zone where construction is prohibited.
The legal basis combined seven separate regulations:
- PP No. 8 of 1953 and PP No. 18 of 2021 on State Land Control
- Law No. 26 of 2007 on Spatial Planning
- Law No. 27 of 2007 on Coastal and Small Islands Management
- Law No. 32 of 2009 on Environmental Protection and Management
- Presidential Regulation No. 51 of 2016 on Coastal Boundaries
- Bali Provincial Regulations No. 2 and 4 of 2023
Authorities then signaled Balangan Beach was next, targeting 23 additional structures with similar zoning violations. By February 2026, Perda No. 3 of 2026 on Coastal Protection formalized "beach setbacks" — coastal villas violating setback requirements now face NIB invalidation.
What Bingin demonstrated is not "they will enforce against you" — that has always been theoretically true. What it demonstrated is that physical demolition is on the menu, executed publicly by the Governor with 500 personnel, military, and police, in a single morning. The deterrent value of an unannounced bulldozer is high.
For operators, the practical takeaway: zoning violations are a primary enforcement target, and "everyone around me operates the same way" is no longer a defense.
03 · The five compliance gates (in the order they actually run)
Bali tourism compliance is not a single document. It is a chain of gates that must clear in the correct sequence. Skipping a gate or attempting them out of order is the most common reason applications stall.
Gate 01 · Legal entity
For foreign owners: a PT PMA (Perseroan Terbatas Penanaman Modal Asing) — Indonesian limited liability company with foreign investment. Minimum paid-up capital: IDR 2.5 billion (~$155k USD at current rates). Foreigners cannot legally hold a Pondok Wisata license — Permenpar 18/2016 restricts that license category to Indonesian citizens.
Operators using nominee structures (an Indonesian citizen "owning" the property on behalf of a foreigner) face explicit prohibition under Bali Regional Regulation No. 4/2026.
For Indonesian citizens: PT (regular limited liability company), CV (commercial partnership), or individual operator structure depending on scale and use case.
Gate 02 · KBLI classification
KBLI (Klasifikasi Baku Lapangan Usaha Indonesia) is the business activity classification code. The correct code determines which licenses apply, which taxes apply, and whether OTAs will accept the listing.
| Code | Activity | Eligibility | Notes |
|---|---|---|---|
| KBLI 55193 | Villa | PT PMA / Indonesian PT | Correct code for high-end private villas serving short-term tourists |
| KBLI 55130 | Pondok Wisata | Indonesian citizens only | Homestay-style, max 5 rooms, lower compliance burden |
| KBLI 55110 | Hotel | PT PMA / PT / CV | Formal hotel operations, branded resorts, larger structured properties |
| KBLI 55199 | Other Short-Term Accommodation | Limited | Catch-all, higher audit risk, being phased toward specific codes |
| KBLI 68111 | Real Estate | — | NOT permitted for short-term rentals — using this to run an Airbnb is a violation |
A frequent compliance error is using KBLI 68111 (Real Estate) to operate short-term rentals. In 2026, this is considered a violation — real estate code does not authorize tourism accommodation activity, and using it to run an Airbnb is grounds for delisting and fine.
Gate 03 · KKPR zoning verification
KKPR (Kesesuaian Kegiatan Pemanfaatan Ruang) is the spatial-planning verification — does your property sit in a zone that permits tourism use?
| Zone | Use | Tourism license eligible? |
|---|---|---|
| Pink Zone (Tourism Zoning) | Commercial tourism operations permitted | Yes — required for KBLI 55193 Villa |
| Yellow Zone (Residential) | Residential use only | No — cannot receive Villa license regardless of neighbors |
| Green Zone (Protected) | Agricultural / conservation / protected | No — construction prohibited; Bingin Beach demolitions were primarily Green Zone violations |
Bali zoning Pink Zone is concentrated in established tourism areas: Seminyak, Kuta, Legian, parts of Canggu, parts of Uluwatu, parts of Ubud. Estimates suggest roughly 80% of Canggu villas currently sit in Yellow Zone.
The OSS system and GISTARU mapping tool allow zoning verification before purchase. Operators who acquire property without zoning verification face the most expensive lesson in Bali real estate.
Gate 04 · Building compliance
Two documents form the building compliance pair:
- PBG (Persetujuan Bangunan Gedung) — Building Approval, replacing the older IMB (Izin Mendirikan Bangunan). The PBG must explicitly designate the building's function — residential PBG does not authorize commercial tourism use.
- SLF (Sertifikat Laik Fungsi) — Certificate of Proper Function, certifying that the building actually meets the function its PBG declares. Issued after physical inspection.
Operators with residential PBGs operating commercial tourism accommodations face a function-mismatch violation that resolves either with PBG amendment (slow, complex) or business model change.
Gate 05 · NIB and operational licensing
NIB (Nomor Induk Berusaha) — Business Identification Number, issued through the OSS (Online Single Submission) system. The NIB must reach "verified" status, not just "issued." Verification requires the upstream gates (legal entity, KBLI, KKPR, PBG, SLF) to clear first.
Under the current OSS-RBA framework, the NIB effectively replaces the older standalone TDUP (Tanda Daftar Usaha Pariwisata) — but only when verified. A "Pending" NIB is not operational.
Tourism standards under Permenpar 6/2025 add the further requirement that the business operate to defined standards: SOPs, safety and sanitation, staffing documentation, hygiene controls. These are operational compliance, not paperwork compliance.
04 · The fiscal pillar — PHR, PPN, PPh
Compliance is not only operational. The fiscal layer is where the Indonesian government recovers the revenue gap from the "informal" tourism market — and the layer that platforms increasingly cross-check via DGT data sharing.
Three tax categories apply to tourism accommodation in Bali:
| Tax | Rate | Threshold | Administered by | Notes |
|---|---|---|---|---|
| PHR (Hotel & Restaurant Tax) | 10% of gross accommodation revenue | All operators | Local Bapenda | OTAs do NOT withhold PHR — operator collects, files monthly, remits to regional gov |
| PPN (Value Added Tax) | 12% (up from 11% in 2026) | Annual turnover > IDR 4.8B | National DGT | Applies on top of PHR for PKP-threshold businesses |
| PPh 26 | 20% national withholding | Non-resident operators (under 183 days/yr in Indonesia) | National DGT | Applied to gross rental payments to foreign individuals |
| PPh 21 | Varies | Employee withholding | National DGT | Personal income tax for staff |
Required registration: NPWPD (Nomor Pokok Wajib Pajak Daerah — Regional Taxpayer ID) for PHR; NPWP for national taxes. Reporting frequency: monthly returns, monthly remittance.
The combined effective tax load for a properly compliant Bali villa operation can exceed 30% of gross revenue once PHR (10%) + PPN (12% if applicable) + PPh structures are included.
Many operators historically did not pay PHR — government officials described this as a "massive deficit in forecasted provincial budget," and PHR enforcement is a primary driver behind the integration with OTA data.
Penalties for late or unfiled returns: 2% per month on unpaid tax plus administrative fines of IDR 50,000–500,000 per return depending on local Perda. Retroactive assessment can reach back multiple years.
05 · The 24-hour foreign guest reporting requirement
A compliance dimension often missed in summary articles: foreign guest reporting.
Indonesian immigration law requires accommodation operators to report foreign guests to local police (typically Polsek — sub-district police) within 24 hours of check-in. The requirement applies to hotels, villas, homestays, retreats — any commercial accommodation hosting foreign nationals.
The reporting workflow includes: passport identification, visa type, length of stay, intended destinations, and contact information. Local police maintain a database of foreign guests in their jurisdiction.
Most informal operators ignore this requirement. Most formal operators handle it through a property manager or front-of-house operator who manually fills paper forms or uploads data to local police portals. Both approaches break at scale — a 20-property operator with 80 monthly arrivals cannot manually file 80 24-hour reports correctly without infrastructure.
Integrated platforms increasingly handle this as part of the booking flow: passport data captured at booking, auto-generated reporting documents, deadlines tracked, and audit trail preserved for any subsequent immigration inquiry.
06 · The OTA verification mechanism — what changed at the listing level
Pre-2026: OTA listings operated largely on operator self-declaration. You created a Booking.com or Airbnb listing, you described the property, you handled the booking, and the platform took its commission. License status was on the operator's conscience.
Post-March 31, 2026: OTA platforms verify licenses against the Ministry of Tourism's database via API integration. Listings without a verified NIB associated with the correct KBLI code can be:
- Hidden from search results (automatic delisting)
- Flagged with non-compliant status
- Removed entirely on subsequent verification cycle
Airbnb's own communication to hosts (sent in waves throughout late 2025 and 2026) directed operators to upload their NIB or face delisting. Booking.com initiated similar verification processes. Agoda and Expedia followed.
Platforms with the "Registered and Licensed" status appear in search. Platforms without it do not. The verification check runs not as a one-time gate at listing creation but as a recurring cycle — operators with verified NIB at March 31, 2026 but lapsed NIB at September 2026 face delisting on the next verification cycle.
A separate piece of context: Airbnb introduced a 15.5% host-only service fee structure in October 2025, replacing the previous guest-and-host split fee model. The combined effect of compliance enforcement plus higher direct OTA cost is making the direct booking channel measurably more economically attractive for operators with the platform infrastructure to capture it.
07 · What this means for digital infrastructure
This is where engineering matters.
Most Bali operators historically treated compliance as a separate administrative function — handled by a lawyer, an accountant, a local company specialist. The property management system handled bookings, the channel manager handled OTA sync, the accounting system handled books, and compliance lived in a folder of paper documents or a Notion page.
That model breaks under March 2026 enforcement for three reasons.
01 · Compliance state is now operational data. Whether an NIB is "verified" or "pending" is no longer a piece of legal paperwork — it determines whether the listing appears on Airbnb today. Whether PHR was filed for the last 6 months is no longer an accounting concern — it determines whether the DGT cross-check produces a discrepancy. Compliance state needs to be visible inside the operational platform, not in a separate folder.
02 · Multi-property operations cannot scale without integration. A villa management company operating 25 properties cannot manually track 25 NIB statuses, 25 KKPR zoning verifications, 25 PBG/SLF documentation chains, and 25 monthly PHR returns across different ownership entities through spreadsheets and WhatsApp coordination. Operations break at the 8–12 property threshold.
03 · Buyers and investors increasingly verify compliance pre-engagement. Serious foreign property buyers now ask compliance questions before signing anything: zoning verification, PT PMA structure requirements, KBLI alignment, building compliance status. Real estate agencies that display compliance status alongside listings close faster than those that treat it as "ask our lawyer after viewing."
08 · What to actually build (the engineering view)
Six platform capabilities serious operators are building into their digital infrastructure in 2026:
01 · License tracking with expiration alerts. Per-property records of NIB status, KBLI classification, KKPR zoning, PBG approval, SLF certification. Expiration tracking with automated alerts to operations team and owner. Document repository with version control. Status visible on operator dashboard and owner portal.
02 · OTA verification readiness. API-readable export of compliance status that can be provided to OTA verification systems on request. Format aligned with Ministry of Tourism database schema where applicable. Reduces the verification response time from days (manual document gathering) to seconds (API call).
03 · PHR collection and remittance workflow. Per-booking PHR calculation (10% of gross accommodation revenue) captured at booking time, not reconciled monthly. Monthly remittance report generation in format Bapenda accepts. Audit trail preserving every booking, every PHR collection, every remittance.
04 · PPN reporting structure (for PKP-threshold operations). For operators crossing the IDR 4.8 billion annual turnover threshold, monthly PPN return preparation in format DGT accepts. Automated reconciliation against booking and revenue data.
05 · Foreign guest 24-hour reporting workflow. Passport data captured at booking, visa type confirmed at check-in, auto-generated reporting documents for local Polsek, deadline tracking (24-hour expiration timer per arrival), audit trail of every report submission.
06 · Compliance-aware listing presentation. For real estate listings: compliance status visible per property — KBLI classification, KKPR zoning, PT PMA structure for foreign-buyer awareness, PBG/SLF documentation status. For accommodation listings: licensed-and-registered indicator that signals OTA-verification readiness to direct booking visitors.
These six capabilities are not new feature requests. They are the integration layer between the regulatory framework and operational reality — the part that makes compliance survive enforcement cycles instead of breaking on next verification.
09 · What this article does not cover
A few things to be explicit about, because the line between operational engineering and regulated advisory work matters.
We are not licensed legal consultants. We do not handle PT PMA establishment, KBLI registration applications, NIB submissions, PBG amendments, or tax filings. Those operations require licensed local specialists.
We are not tax consultants. The PHR/PPN/PPh framework summary in this article reflects publicly available regulatory information as of the publication date and should not be treated as tax advice for any specific situation. Tax obligations vary by business structure, revenue level, regency, and date.
We are not licensed real estate brokers. Property zoning verification, ownership structure decisions, and acquisition due diligence work with licensed AREBI-certified brokers and notaries.
What we do is build the engineering layer between these specialists and the operational reality of running a Bali villa, hotel, retreat, or property portfolio. Compliance state becomes operational data. Operational data becomes operator visibility. Operator visibility becomes owner trust and OTA verification readiness.
10 · What happens next
Several developments to watch through the rest of 2026:
- OTA verification cycles will run periodically, not as a one-time gate. Operators verified in April 2026 face re-verification in subsequent quarters.
- Bali Regional Regulation No. 4/2026 enforces the prohibition on nominee land ownership structures, with Perda No. 3/2026 adding coastal setback enforcement.
- DGT cross-checking of OTA-reported revenue against NPWPD records is expected to intensify, with retroactive PHR assessments likely.
- Foreign operators using tourist visas to manage rental businesses face explicit immigration enforcement — Indonesia treats this as illegal employment.
- Premium hospitality brand entries (Mandarin Oriental, Kimpton Ubud, Regent Canggu, JW Marriott Bali Ubud, SONO Felice Canggu in the 2026–2027 pipeline) reset the baseline for what a compliant Bali property looks like operationally.
The operators investing in platform-integrated compliance now are not solving for the March 31, 2026 deadline. They are solving for operational sustainability under a regulatory framework that will continue to evolve through the next decade.
Notes from the field
H-Studio Indonesia builds engineering for Bali operators ready to compete under the 2026 framework — villa management companies, hospitality groups, real estate agencies, retreat operators, vertically integrated developers. Code stays yours. No vendor lock-in. Same senior team from System Mapping through ongoing operations.
For deeper coverage of how compliance integration looks in practice, see our Bali Compliance Architecture service page. For multi-property operator platforms, see Operational Platforms. For real estate and developer operations, see Real Estate & Property Agencies.
If your operation is approaching the next OTA verification cycle and the compliance state is currently in a Notion page or a folder of scanned documents, that is a conversation worth having. Start with a System Mapping ($750–1.5k, 1 week). Written audit. Prioritized roadmap. Can be used with any engineering team.