Rasyid, Havis Ar (2025) Analisis Perlindungan Data Pribadi Indonesia Di Dalam Undang-Undang No 27 Tahun 2022 Tentang Perlindungan Data Pribadi Dibandingkan Dengan General Data Protection Regulation (Studi Kasus ECommerce). Masters thesis, Universitas Islam Riau.

Text skripsi_231021024_watermark.pdf - Published Version Restricted to Registered users only Download (4MB) | Request a copy

Abstract

The development of information and communication technology in the era of globalization has brought about major changes to electronic commerce (e-commerce) activities, where digital transactions not only offer convenience, speed, and efficiency, but also pose serious risks related to security and personal data protection. Personal data, which is part of privacy rights and human rights, is now increasingly vulnerable to misuse, theft, and leakage due to weak protection systems, as seen in the rampant cases of data leakage and data sales in Indonesia in recent years. In response to this situation, Indonesia passed Law No. 27 of 2022 on Personal Data Protection (PDP Law) as the first specific regulation that comprehensively regulates data protection, although it is still relatively new compared to the European Union's General Data Protection Regulation (GDPR), which has been a global standard and international reference since 2018. This study uses a normative juridical method with a legislative and conceptual approach to analyze and compare the principles, mechanisms, and law enforcement of personal data protection in the PDP Law and GDPR, particularly in ecommerce practices. The results of the study show that although both have similar objectives, the GDPR is more detailed and explicit in stipulating the principles of data processing, data subject rights, data controller obligations, data breach notification obligations, and clear administrative sanctions, while the PDP Law still faces challenges in terms of independent supervisory institutions, consistency of implementation, effectiveness of legal sanctions, and the absence of derivative regulations. Thus, although the PDP Law is a step forward for Indonesia in strengthening privacy rights protection in the digital era, learning from the experience of implementing the GDPR remains very important to strengthen legal certainty, raise public awareness of the importance of personal data protection, build public trust in the e-commerce ecosystem, and support the development of the national digital economy in the face of increasingly competitive global competition.

Actions (login required)

View Item