Personal Data Protection in ASEAN: A Critical Comparison between Indonesia's and Malaysia's Legal Frameworks

Authors

  • Putu Aryan Darma Sukerta IBLAM School of Law, Jakarta, Indonesia, Indonesia
  • Andri Sutrisno IBLAM School of Law, Jakarta, Indonesia

DOI:

https://doi.org/10.30863/clr.v3i2.5605

Keywords:

Personal Data Protection, Comparative Legal Analysis, Regulatory Enforcement, Data Subject Rights.

Abstract

The development of digital technology presents significant challenges in personal data protection amid globalization and cross-border data exchange. This study compares Indonesia’s Personal Data Protection Act (UU PDP) and Malaysia’s Personal Data Protection Act (PDPA) 2010 from a normative and doctrinal legal perspective. Using a comparative legal approach through literature review, this research analyzes data subject rights, application mechanisms, supervisory structures, and enforcement and sanctioning mechanisms in both jurisdictions. The findings indicate that Indonesia’s UU PDP is more comprehensive as it covers both the public and private sectors, regulates formal procedures for data access, correction, deletion, and consent withdrawal, and is supported by strict administrative and criminal sanctions. In contrast, Malaysia’s PDPA applies only to commercial transactions, relying on lighter administrative sanctions, potentially leaving gaps in public sector data protection. Both countries also face challenges regarding the independence of supervisory bodies. This study highlights the need for institutional reforms and regulatory adjustments in line with international standards to enhance transparency, accountability, and legal certainty in personal data protection across ASEAN

References

Ahdiat, Adi. “Indonesia Masuk 10 Negara dengan Kebocoran Data Terbesar.†https://databoks.katadata.co.id, 2024. https://databoks.katadata.co.id/teknologi-telekomunikasi/statistik/cc5473708a4f8dc/indonesia-masuk-10-negara-dengan-kebocoran-data-terbesar.

Alibeigi, Ali, dan Abu Bakar Munir. “Malaysian personal data protection act, a mysterious application.†University of Bologna Law Review 5, no. 2 (2020): 362–74. https://doi.org/10.6092/ISSN.2531-6133/12441.

Ayiliani, Fanisa Mayda, dan Elfia Farida. “Urgensi Pembentukan Lembaga Pengawas Data Pribadi sebagai Upaya Pelindungan Hukum terhadap Transfer Data Pribadi Lintas Negara.†Jurnal Pembangunan Hukum Indonesia 6, no. 3 (2024): 431–33.

Daniswara, Fahreza, dan Faiz Rahman. “Perlindungan Data Pribadi: Studi Komparasi terhadap Praktik di Singapura, Amerika Serikat, dan Malaysia.†Center For Digital Society 31 (2018): 24.

Djafar, Wahyudi, dan M. Jodi Santoso. PERLINDUNGAN DATA PRIBADI: Pentingnya Otoritas Pengawasan Independen. Lembaga Studi dan Advokasi Masyarakat (ELSAM), 2019.

Doly, Denico. “Pembentukan Lembaga Pengawas Pelindungan Data Pribadi dalam Perspektif Pembentukan Lembaga Negara Baru.†Negara Hukum 12, no. 2 (2021): 227.

Dwi, Andika. “10 Negara dengan Kasus Kebocoran Data Terbanyak, Mirip PDN Indonesia.†Tempo.co, 2024.

Fachri, Ferinda K. “Deputi BSSN: Penyebab Kebocoran Data Pribadi Biasanya Kepatuhan Hukum yang Kurang.†Hukum Online, 2024. https://www.hukumonline.com/berita/a/deputi-bssn--penyebab-kebocoran-data-pribadi-biasanya-kepatuhan-hukum-yang-kurang-lt6644ead0802f8/?page=2.

Fathur, Muhammad. “Tanggung Jawab Tokopedia Terhadap Kebocoran Data Pribadi Konsumen (Tokopedia’s Responsibility for the Leakage of Consumers Personal Data).†In 2nd National Conference on Law Studies: Legal Development Towards A Digital Society Era, 43–60, 2020. http://jurnal.unissula.ac.id/index.php/PH/article/view/1476.

Intan, Ghita. “Pusat Data Nasional Diretas, Pakar: Pemerintah Tak Pernah Belajar dari Kesalahan.†VOA Indonesia. com, 2024, 1–5. https://www.voaindonesia.com/a/pusat-data-nasional-diretas-pakar-pemerintah-tak-pernah-belajar-dari-kesalahan/7682298.html.

Kusnadi, Sekaring Ayumeida. “Perlindungan Hukum Data Pribadi Sebagai Hak Privasi.†AL WASATH Jurnal Ilmu Hukum 2, no. 1 (2021): 9–16. https://doi.org/10.47776/alwasath.v2i1.127.

Matheus, Juan, dan Ariawan Gunadi. “Pembentukan Lembaga Pengawas Perlindungan Data Pribadi Di Era Ekonomi Digital : Kajian Perbandingan Dengan KPPU.†Justisi 10, no. 1 (2023): 20–35. https://doi.org/10.33506/jurnaljustisi.v10i1.2757.

Mustafa, Irfan Amir, Asni Zubair, dan Hamzah Hamzah. Kampus Merdeka. CV Bintang Semesta Media. Yogyakarta: Bintang Semesta Media, 2023.

PDPA. “Laws of Malaysia Act 709 Personal Data Protection Act 2010.†10 June 2010, no. 2 (2010): 95. http://www.kkmm.gov.my/pdf/Personal Data Protection Act 2010.pdf.

Razaq, Niken. “11 Kasus Kebocoran Data di Malaysia Dua Tahun Terakhir.†cyberthreat.id, 2023. https://cyberthreat.id/read/15129/11-Kasus-Kebocoran-Data-di-Malaysia-Dua-Tahun-Terakhir.

Rizal, Muhammad Saiful. “Perbandingan Perlindungan Data Pribadi Indonesia dan Malaysia.†Jurnal Cakrawala Hukum 10, no. 2 (2019): 218–27. https://doi.org/10.26905/idjch.v10i2.3349.

Rizki, Mochamad Januar. “Menyorot Independensi Lembaga Pengawas Data Pribadi.†Hukum Online.com, 2023. https://www.hukumonline.com/berita/a/menyorot-independensi-lembaga-pengawas-data-pribadi-lt6461f9e088aeb.

Roy Franedya. “91 Juta Data Pengguna Bocor, Tokopedia Digugat Rp 100 M.†CNBC Indonesia, 2020, 1–5.

Singgih, Viriya. “Petinggi Kominfo mundur ‘sebagai tanggung jawab moral’ setelah Pusat Data Nasional diretas.†BBC News Indonesia, 2024, 1–21. https://www.bbc.com/indonesia/articles/c8vdmymmynzo.

Triyanti, Ninuk, I Gusti Ayu, Ketut Rachmi, dan Lego Karjoko. “Hasanuddin LawReview Legal Gaps in Personal Data Protection : Reforming Indonesia ’ s Population Administration Law.†HasanuddinLawReview 1, no. 1 (2025): 132–47. https://doi.org/10.20956/halrev.v11i1.6177.

Wardani, Indah Alvi, dan Deaf Wahyuni Ramadhani. “STUDI PERBANDINGAN TENTANG TINDAK PIDANA DOXING DI INDONESIA, MALAYSIA, SINGAPURA, DAN THAILAND,†2024. Universitas Bung Hatta.

Widjaja, Gunawan, dan Fransiska Milenia Cesarianti. “Urgensi Pembentukan Lembaga Pengawas Pelindungan Data Pribadi Di Indonesia Berdasarkan Pasal 58 Juncto Pasal 59 Dan Pasal 60 Undang – Undang Nomor 27 Tahun 2022 Tentang Pelindungan Data Pribadi.†SINERGI : Jurnal Riset Ilmiah 1, no. 4 (2024): 234–42. https://doi.org/10.62335/8qf44b59.

Downloads

Published

2024-11-13

How to Cite

Darma Sukerta, P. A., & Sutrisno, A. (2024). Personal Data Protection in ASEAN: A Critical Comparison between Indonesia’s and Malaysia’s Legal Frameworks. Constitutional Law Review, 3(2), 133–147. https://doi.org/10.30863/clr.v3i2.5605

Issue

Vol. 3 No. 2 (2024)

Section

Articles

Citation Check

License

Authors who publish with Contitutional Law Review (Colrev) agree to the following terms:

  1. Authors retain copyright and grant the journal right of first publication with the work simultaneously licensed under a Creative Commons Attribution License (CC BY-SA 4.0) that allows others to share the work with an acknowledgment of the work's authorship and initial publication in this journal. 

  2. Authors are able to enter into separate, additional contractual arrangements for the non-exclusive distribution of the journal's published version of the work (e.g., post it to an institutional repository or publish it in a book), with an acknowledgment of its initial publication in this journal.

  3. Authors are permitted and encouraged to post their work online (e.g., in institutional repositories or on their website) prior to and during the submission process, as it can lead to productive exchanges, as well as earlier and greater citation of published work.