Challenges Faced by Businesses in Managing Personal Data
- A Small Font
- A Medium Font
- A Bigger Font
The Indonesian government enacted the Personal Data Protection Law (UU PDP) on October 17, 2022.
This law regulates various aspects, from data subject rights and data processing provisions to data transfer and the obligations of parties collecting and processing personal data belonging to others.
The UU PDP even imposes criminal penalties on corporations that misuse or exploit consumer personal data outside the applicable regulations.
This threat is stipulated, for example, in Article 70 paragraph (1) of the UU PDP, which reads, "In the event that the criminal act as referred to in Article 67 and Article 68 is committed by a corporation, the penalty may be imposed on the management, controlling party, order giver, beneficial owner, and/or the corporation."
However, it appears that a significant number of Indonesian businesses are facing challenges in implementing the UU PDP.
According to a report by the Ministry of Communication and Informatics and the Katadata Insight Center (KIC), almost half of the 135 surveyed digital businesses did not understand the regulations within the UU PDP.
Other respondents cited challenges such as the lack of PDP certification, insufficient technology and human resources, and limited technological infrastructure, as detailed in the graph.
This survey was conducted from July 26 to August 31, 2021, involving 135 respondents from digital businesses across 14 Indonesian provinces.
All respondents had obtained/requested/collected consumer personal data. 66.7% were company managers or administrators, while 33.3% were owners or upper management.
For a more detailed view of the survey results, the full report can be downloaded via this link.
"Disclosure: This is an AI-generated translation of the original article. We strive for accuracy, but please note that automated translations may contain errors or slight inconsistencies."