Firsta Rahadatul Aisy, Muhammad Azil Maskur, A.M Adzkiya Amiruddin
In the digital era, technological advancements have enabled governments and corporations to streamline services and expand market reach, often leading to the collection and transfer of personal data without the knowledge of data subjects. This poses significant risks to constitutional rights. Indonesia’s Law Number 27 of 2022 concerning Personal Data Protection (PDP Law) aims to address these risks, yet frequent data breaches indicate ineffective enforcement of administrative sanctions due to the absence of an independent authority. This study analyzes the urgency of establishing a Personal Data Protection Agency in Indonesia, evaluates current sanctions under the PDP Law, and compares the enforcement mechanisms of data protection agencies in Ireland, Australia, and Singapore. Using a normative legal approach with qualitative methods, the research finds that these countries’ independent agencies effectively enforce data protection laws and administrative sanctions. The study reveals significant enforcement shortcomings in Indonesia, underscoring the need for a dedicated authority to prevent violations and protect personal data rights. By adopting best practices from Ireland, Australia, and Singapore, Indonesia can enhance its data protection framework. Immediate action by the President to establish this authority through a Presidential Regulation is crucial for safeguarding personal data in the digital age. © 2025 Authors.
Faculty of Law, The University of Melbourne, Melbourne, Australia; Faculty of Law, Universitas Negeri Semarang, Semarang, Indonesia; Faculty of Law, Universitas Indonesia, Depok, Indonesia
Research at a Glance
Register to unlock
Topics & SDG Alignment
Register to unlock
Collaboration
Register to unlock
Author Profile (Selected)
Register to unlock
References Overview
Register to unlock
Journal & Source
Register to unlock
Metadata & Integrity
Register to unlock