Data Protection in Limbo: Regulatory Challenges in the Absence of an Implementing Authority in Indonesia
DOI:
https://doi.org/10.55681/sentri.v4i11.4965Keywords:
Data Protection, Institutional Independence, Legal Certainty, Personal Data Protection, Regulatory EnforcementAbstract
Data protection is a critical issue globally, and Indonesia's Personal Data Protection Law (PDP Law) of 2022 marks a major legal development. This study examines regulatory challenges stemming from the absence of an implementing supervisory authority mandated by the law. Employing qualitative doctrinal research and policy analysis, the study analyzes legal texts, institutional policies, and stakeholder interviews. The population includes government agencies, legal bodies, and private organizations involved with personal data management, with purposive sampling of relevant experts. Data were analyzed thematically to identify institutional gaps and enforcement issues. Findings reveal a regulatory vacuum caused by the lack of an independent supervisory authority, resulting in enforcement weaknesses, diminished public trust, and legal uncertainties. The study concludes that establishing a functional, autonomous authority is essential to enhance regulatory coherence, business compliance, and Indonesia's international data governance standing. Recommendations include formal institutionalization, financial sustainability, and multi-sectoral coordination.
Downloads
References
Ariansyah, K. (2023). Implementasi Undang-Undang Perlindungan Data Pribadi di Indonesia: Tantangan dan Prospek. Pusat Studi Kebijakan Digital Indonesia.
Association of Southeast Asian Nations (ASEAN). (2021). ASEAN Framework on Personal Data Protection. ASEAN Secretariat.
Bennett, C. J., & Raab, C. D. (2020). The governance of privacy: Policy instruments in global perspective (3rd ed.). MIT Press.
Creswell, J. W. (2022). Qualitative inquiry and research design: Choosing among five approaches (5th ed.). Sage Publications.
Emzir. (2021). Metodologi Penelitian Kualitatif: Teori dan Praktik. Rajawali Pers.
European Commission. (2016). Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation). Official Journal of the European Union, L 119, 1–88.
Kementerian Komunikasi dan Informatika Republik Indonesia (Kominfo). (2023). Evaluasi Pelindungan Data Pribadi dalam Sistem Elektronik Nasional. Kominfo.
Kuner, C. (2021). Transborder data flows and data privacy law. Oxford University Press.
Lugna, L., & Lim, C. (2022). Institutional independence and accountability of data protection authorities in ASEAN. Asian Journal of Comparative Law, 17(2), 241–267. https://doi.org/10.1017/asjcl.2022.10
Rachmawati, D., & Setiawan, F. (2024). Legal certainty and public trust in the enforcement of Indonesia’s PDP Law. Jurnal Hukum dan Teknologi Digital Indonesia, 3(1), 45–67. https://doi.org/10.22146/jhtdi.45213
Rossi, A., & Draper, S. (2019). Institutional design for privacy oversight: Comparative perspectives. International Data Privacy Law, 9(4), 287–302. https://doi.org/10.1093/idpl/ipz020
SAFEnet. (2024). Indonesia Digital Rights Report 2024: Trust, Transparency, and Accountability in the Age of Data. SAFEnet.
Sugiyono. (2021). Metode Penelitian Kuantitatif, Kualitatif, dan R&D. Alfabeta.
Sudaryono, E. (2022). Analisis hukum terhadap implementasi Undang-Undang Perlindungan Data Pribadi di Indonesia. CV Mandar Maju.
Supomo, B. (2023). Hukum Tata Kelola Data dan Perlindungan Privasi di Indonesia: Analisis Yuridis dan Komparatif. Alumni Press.
World Bank. (2023). Digital government readiness assessment: Indonesia country report. World Bank Group.
Downloads
Published
How to Cite
Issue
Section
License
Copyright (c) 2025 Andreas Bonardo Sihombing
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
