Legal Governance of Personal Data Protection in Indonesian Digital Business

Dwi Cahyono; Denok Wahyudi Setyo  Rahayu; Mungkap Mangapul  Siahaan; John  Edwards

doi:10.34306/q63s1f76

Authors

Dwi Cahyono University of Muhammadiyah Jember, Indonesia Author https://orcid.org/0000-0001-9951-560X
Denok Wahyudi Setyo Rahayu Universitas Islam Balitar, Indonesia Author https://orcid.org/0009-0000-6167-6352
Mungkap Mangapul Siahaan Universitas HKBP Nommensen Pematangsiantar, Indonesia Author https://orcid.org/0000-0002-8785-1160
John Edwards Pandawan Incorporation, New Zealand Author https://orcid.org/0009-0004-0067-0490

DOI:

https://doi.org/10.34306/q63s1f76

Keywords:

Personal Data Protection, Digital Business, Data Governance, Legal Framework, Digital Ecosystem

Abstract

This study examines the legal framework for personal data protection in Indonesia digital business ecosystem following the enactment of Law No. 27 of 2022 on Personal Data Protection. As a rapidly growing digital economy, Indonesia represents a transitional legal environment seeking to translate global privacy principles into enforceable domestic regulations, unlike jurisdictions with more established frameworks such as the GDPR. This study aims to analyze the legal architecture of Indonesia personal data protection regime and its implications for governance within the digital business sector. Using a norma- tive legal research approach combined with regulatory analysis, this study examines Law No. 27 of 2022, its institutional enforcement mechanisms, and relevant regulations governing electronic systems and digital platforms, including the Electronic Information and Transactions Law. The findings reveal that Indonesia has incorporated key international data protection principles, including lawfulness, transparency, purpose limitation, and accountability. However, their implementation continues to face challenges related to regulatory coordination, supervisory authority, enforcement capacity, and compliance readiness among digital business actors. The Indonesian experience illustrates the complexity of harmonizing global data protection standards with domestic legal structures in emerging digital economies. Strengthening institutional enforcement, clarifying supervisory responsibilities, and improving regulatory coherence are therefore essential to ensuring effective personal data protection and supporting the sustainable growth of Indonesia digital ecosystem.

Downloads

Download data is not yet available.

Author Biographies

Dwi Cahyono, University of Muhammadiyah Jember, Indonesia

Faculty of Economic and Business
Denok Wahyudi Setyo Rahayu, Universitas Islam Balitar, Indonesia

Fakultas Ekonomi Program Studi Manajemen
Mungkap Mangapul Siahaan, Universitas HKBP Nommensen Pematangsiantar, Indonesia

Faculty of Teacher Training and Education
John Edwards, Pandawan Incorporation, New Zealand

Department of Law and Information Technology

References

[1] D. D. Wijayanto, K. W. Indrayanti et al., “Personal data protection in digital business based on the law on personal data protection,”International Journal of Research in Social Science and Humanities (IJRSS) ISSN: 2582-6220, DOI: 10.47505/IJRSS, vol. 6, no. 8, pp. 6–12, 2025.

[2] W. Yuspin, K. Wardiono, A. Nurrahman, and A. Budiono, “Personal data protection law in digital banking governance in indonesia,” Studia Iuridica Lublinensia, vol. 32, no. 1, pp. 99–130, 2023.

[3] Z. Y. Mubarak and R. N. Triwibowo, “Regulatory transformation of the digital economy and the chal-lenges of personal data protection in indonesia: A literature review,” International Journal of Financial Economics, vol. 2, no. 1, pp. 187–196, 2025.

[4] B. Prasetyo, I. G. A. K. R. Handayani, and A. Sulistiyono, “Data protection laws in indonesia: Navigating privacy in the digital age,” Side: Scientific Development Journal, vol. 2, no. 1, pp. 9–16, 2025.

[5] R. Budiarto, I. K. S. Buana, H. Kabetta, H. Setiawan, N. Qomariasih et al., “Enhancing data governance and personal data protection: A strategic review for cases in indonesia,” in 2024 International Conference on Informatics, Multimedia, Cyber and Information System (ICIMCIS). IEEE, 2024, pp. 625–630.

[6] A. S. Sudarwanto and D. B. B. Kharisma, “Comparative study of personal data protection regulations in indonesia, hong kong and malaysia,” Journal of Financial Crime, vol. 29, no. 4, pp. 1443–1457, 2022.

[7] I. Lutrianto and R. Riswaldi, “Legal problems of personal data protection in the digital era in personal data protection law in indonesia,” Greenation International Journal of Law and Social Sciences, vol. 3, no. 2, pp. 345–350, 2025.

[8] I. Hanafi and A. F. Lubis, “Protection of privacy and intellectual property rights in digital data manage-ment in indonesia,” The Easta Journal Law and Human Rights, vol. 2, no. 01, pp. 33–40, 2023.

[9] M. Solikhah, “Personal data protection in the era of digital transformation: Challenges and solutions in the indonesian cyber law framework,” Indonesian Cyber Law Review, vol. 2, no. 1, pp. 39–50, 2025.

[10] S. Mariyam, A. P. Satria, H. Hariyanto, and A. Masum, “Safeguarding personal data in indonesian e-commerce from a constitutional rights perspective,” Jambe Law Journal, vol. 8, no. 2, pp. 683–711, 2025.

[11] U. Rahardja, M. T. D. S. Putri, N. Septiani, F. Amelia, A. Avandi, and R. Evans, “Human centered legal governance for autonomous ai in digital societies,”

[12] I. Rahman, M. H. Muhtar, N. M. Mongdong, R. Setiawan, B. Setiawan, and H. K. Siburian, “Harmoniza-tion of digital laws and adaptation strategies in indonesia focusing on e-commerce and digital transac-tions,” Innovative: Journal Of Social Science Research, vol. 4, no. 1, pp. 4314–4327, 2024.

[13] R. A. Prastyanti and R. Sharma, “Establishing consumer trust through data protection law as a competitive advantage in indonesia and india,” Journal of Human Rights, Culture and Legal System, vol. 4, no. 2, pp.354–390, 2024.

[14] A. A. Nugraha and A. H. Nasyuha, “Integrating iso 27001 and indonesia’s personal data protection law for data protection requirement model,” Journal of Information Systems and Informatics, vol. 6, no. 2, pp.1052–1069, 2024.

[15] L. Meria, M. S. Gunawan, S. Solahudin, U. Rahardja, and A. Patel, “Enhancing digital business students competence through ui/ux design training for digital product development,” ADI Pengabdian Kepada Masyarakat, vol. 6, no. 2, pp. 133–144, 2026. [16] F. Rahman, “Safeguarding personal data in the public sector: Unveiling the impact of the new personal data protection act in indonesia,” UUM Journal of Legal Studies, vol. 16, no. 1, pp. 1–18, 2025.

[17] A. Marwan and F. Bonfigli, “Detection of digital law issues and implication for good governance policy in indonesia,” Bestuur, vol. 10, no. 1, pp. 22–32, 2022.

[18] E. Santoso et al., “Opportunities and challenges: e-commerce in indonesia from a legal perspective,”Jurnal Penelitian Hukum De Jure, vol. 22, no. 3, pp. 395–410, 2022.

[19] S. Prabowo, M. Abdurohman, H. H. Nuha, and S. Sutikno, “Identifying and validating critical factors in designing a comprehensive data protection impact assessment (dpia) framework for indonesia.” Interna-tional Journal of Safety & Security Engineering, vol. 15, no. 1, 2025.

[20] Indonesian National Police. (2025, Jan.) Govt. to harmonize presidential decree in strengthening personal data protection. Indonesian National Police (INP). Accessed: 15 June 2026. [Online]. Available: https://inp.polri.go.id/artikel/govt-to-harmonize-presidential-decree-in-strengthening-personal-data-protection

[21] U. Rahardja, M. A. Ngad, S. Millah, E. P. Harahap, and Q. Aini, “Blockchain application in educational certificates and verification compliant with general data protection regulations,” in 2022 10th International Conference on Cyber and IT Service Management (CITSM). IEEE, 2022, pp. 1–7.

[22] F. Sugianto, E. Sukardi, and T. Michael, “Comparison of legal consumer protection systems in e-commerce transactions to support digital economic growth in indonesia,” Dalat University Journal of Science, pp. 39–51, 2022.

[23] M. Hafel et al., “Digital transformation in politics and governance in indonesia: Opportunities and challenges in the era of technological disruption,” Society, vol. 11, no. 2, pp. 742–757, 2023.

[24] D. S. Gojali, “Identifying the prevalence of cybercrime in indonesian corporations: A corporate legislation perspective,” International Journal of Cyber Criminology, vol. 17, no. 1, pp. 1–11, 2023.

[25] S. W. Dyatmika, B. Suyanto, E. Setijaningrum, A. Rizky, and T. Mkhize, “Enhancing brand loyalty through customer satisfaction strategies in digital business,” Aptisi Transactions on Technopreneurship (ATT), vol. 7, no. 2, pp. 556–566, 2025.

[26] M. K. Hamsin, A. Halim, R. Anggriawan, and H. Lutfiani, “Sharia e-wallet: The issue of sharia compliance and data protection.” Al Manahij: Jurnal Kajian Hukum Islam, vol. 17, no. 1, p. 53, 2023.

[27] Z. Moric, V. Dakic, D. Djekic, and D. Regvart, “Protection of personal data in the context of e-commerce,” ́Journal of cybersecurity and privacy, vol. 4, no. 3, pp. 731–761, 2024.

[28] A. Kristian, A. Supriyadi, R. Sean, A. Husain et al., “Exploring the relationship between financial competence and entrepreneurial ambitions in digital business education,” APTISI Transactions on Management, vol. 8, no. 2, pp. 139–145, 2024.

[29] M. Lubis and D. O. D. Handayani, “The relationship of personal data protection towards internet addic- tion: Cyber crimes, pornography and reduced physical activity,” Procedia Computer Science, vol. 197,pp. 151–161, 2022.

[30] I. Amarini, Y. Saefudin, I. A. Kartini, M. Marsitiningsih, and N. Ismail, “Digital transformation: creatingan effective and efficient court in indonesia,” Legality: Jurnal Ilmiah Hukum, vol. 31, no. 2, pp. 266–284, 2023.

[31] I. Anwary, “The role of public administration in combating cybercrime: An analysis of the legal framework in indonesia,” International Journal of Cyber Criminology, vol. 16, no. 2, pp. 216–227, 2022.

[32] D. Cahyono, A. Susbiyani, E. Lestari, F. Fauziyah, N. Qomariah, and Y. S. Guntur, “Role of personal savings in financial tech impact on family planning in indonesia,” Aptisi Transactions on Technopreneurship (ATT), vol. 7, no. 1, pp. 120–131, 2025.

[33] D. S. Negara and D. Darmawan, “Digital empowerment: Ensuring legal protections for online arisan engagements,” Bulletin of Science, Technology and Society, vol. 2, no. 2, pp. 13–19, 2023.

[34] R. Wagola, A. Nurmandi, Misran, and D. Subekti, “Government digital transformation in indonesia,” in International Conference on Human-Computer Interaction. Springer, 2023, pp. 286–296.

[35] R. Widayanti, A. B. Mutiara, and A. Tarigan, “Data governance in blockchain-based systems for internship grade conversion,” Aptisi Transactions on Technopreneurship (ATT), vol. 6, no. 3, pp. 509–521, 2024.

[36] A. T. Oyewole, B. B. Oguejiofor, N. E. Eneh, C. U. Akpuokwe, and S. S. Bakare, “Data privacy laws and their impact on financial technology companies: a review,” Computer science & IT research journal, vol. 5, no. 3, pp. 628–650, 2024.

[37] T. Anas and E. Cahyawati, “Strategic investment policies for digital transformation,” Journal of SoutheastAsian Economies, vol. 40, no. 1, pp. 96–126, 2023.

[38] A. Bist, N. Zakaria, N. Anwar, G. Jacqueline, and L. MING, “Future of work: How digital tools are transforming human resource management,” APTISI TRANSACTIONS ON MANAGEMENT: iLearning Journal Center, vol. 8, no. 3, pp. 213–220, 2024.

[39] E. Coche, A. Kolk, and V. Ocel ́ık, “Unravelling cross-country regulatory intricacies of data governance: the relevance of legal insights for digitalization and international business,” Journal of International Business Policy, vol. 7, no. 1, pp. 112–127, 2024.

[40] N. Siagian, “Leveraging digital business communication for enhanced profitability in global markets,”in Proceedings of International Conference on Social, Politics, Administration, and Communication Sciences, vol. 1, no. 2, 2024, pp. 94–110.

[41] S. W. Gusman, “Development of the indonesian government’s digital transformation,” Dinasti International Journal of Education Management And Social Science, vol. 5, no. 5, pp. 1128–1141, 2024.

[42] T. Sendjaja, D. J. Rachbini, R. Astini, and D. Asih, “Driving socialpreneurship and diving into digital transformation to enhance donation intentions in indonesia,” Aptisi Transactions on Technopreneurship (ATT), vol. 7, no. 3, pp. 687–700, 2025.

[43] A. Noor, H. Ahamat, I. Marzuki, D. Wulandari, A. A. Junaidi, E. Lisdiyono, and B. Trisnawati, “Regulation and consumer protection of fintech in indonesia: The case of islamic fintech lending,” Linguistics and Culture Review, vol. 6, no. on, pp. 49–63, 2022.

[44] A. Prayitno, “Technological innovation in public administration transformation: Case study of e-government implementation in indonesia,” Journal of Governance, vol. 8, no. 4, pp. 628–642, 2023.

[45] A. Rizky, R. W. Nugroho, W. Sejati, O. Sy et al., “Optimizing blockchain digital signature security in driving innovation and sustainable infrastructure,” Blockchain Frontier Technology, vol. 4, no. 2, pp.183–192, 2025.

[46] B.-K. Cheryl and B.-K. Ng, “Protecting the unprotected consumer data in internet of things: Current scenario of data governance in malaysia,” Sustainability, vol. 14, no. 16, p. 9893, 2022.

[47] A. Amruddin, A. Safari, E. Masita, R. Indrawati, and E. Y. Utami, “The urgency of digital business in improving the rural community youth organization’s business,” Journal Of Human And Education (JAHE), vol. 4, no. 1, pp. 70–75, 2024.

[48] G. Simuni and A. Atla, “Hadoop in enterprise data governance: Ensuring compliance and data integrity,”Available at SSRN 4982500, 2024.

[49] M. A. W. Saputra, D. Ochtaffia, D. Apriani, S. C. Yusfi, and M. Gori, “Blockchain applications in education affecting challenges and problems in digital,” Blockchain Frontier Technology, vol. 2, no. 2, pp.15–23, 2023.

[50] I. Anwary, “Evaluating legal frameworks for cybercrime in indonesian public administration: An interdisciplinary approach,” International Journal of Cyber Criminology, vol. 17, no. 1, pp. 12–22, 2023.