PELAKSANAAN HARMONISASI RANCANGAN UNDANG-UNDANG PERLINDUNGAN DATA PRIBADI (RUU PDP)

2020 ◽  
Vol 8 (1) ◽  
pp. 117
Author(s):  
Padma Widyantari ◽  
Adi Sulistiyono

<p>Abstract<br />Establishment of legislation is the process of making legislation basically starting from planning, preparation, techniques of preparation, formulation, discussion, endorsement, enactment, and dissemination. Among the series of processes above, there is a process that is not explicitly mentioned but has a very important role, namely the harmonization process. Harmonization is one of a series of processes for the formation of legislation which is an effort to harmonize a statutory regulation with other laws and regulations, both higher, equal and lower, and other matters outside of legislation. laws, so that they are arranged systematically, not conflicting or overlapping. The problem in this study is how to harmonize the Personal Data Protection Bill. The method of this study uses a descriptive normative legal research approach with a statute approach . The primary legal sources are laws, books, journals, while the secondary legal sources are the results of interviews with related parties. The results of this study are expected to allow readers to know how to implement harmonization of legislation in general, and the implementation of harmonization of the Personal Data Protection Bill in particular.<br />Keywords: Harmonization; Legislation; Personal Data Protection Bill.</p><p>Abstrak<br />Pembentukan peraturan perundang-undangan adalah proses pembuatan peraturan perundangundangan pada  dasarnya dimulai dari perencanaan,persiapan,  teknik penyusunan,perumusan,pembahasan, pengesahan,<br />pengundangan, dan penyebarluasan. Di antara rangkaian proses di atas ada proses yang tidak disebutkan secara tegas tetapi mempunyai peran yang sangat penting, yaitu proses harmonisasi.Harmonisasi merupakan<br />salah satu dari rangkaian proses pembentukan peraturan perundang-undangan yang merupakan upaya untuk menyelaraskan suatu peraturan perundangundangan dengan peraturan perundang-undangan lain,  baik  yang  lebih tinggi,  sederajat, maupun yang  lebih rendah,  dan  hal-hal lain di  luar  peraturan perundang-undangan, sehingga tersusun secara  sistematis, tidak  saling  bertentangan atau tumpang tindih (overlaping). Permasalahan dalam kajian ini adalah bagaimana pelaksanaan harmonisasi Rancangan Undang-Undang Perlindungan  Data Pribadi Metode kajian ini menggunakan metode pendekatan penelitian hukum normatif deskriptif<br />dengan pendekatan perundang-undangan (statute approac). Adapun sumber hukum primernya adalah undang-undang, buku, jurnal, sedangkan sumber hukum sekundernya adalah hasil wawancara pihak terkait. Hasil kajian ini diharapkan agar pembaca mengetahui bagaimana pelaksanaan harmonisasi peraturan perundang-undangan pada umumnya, dan pelaksanaan harmonisasi Rancangan UndangUndang Perlindungan Data Pribadi pada khususnya.<br />Kata Kunci: Harmonisasi; Peraturan Perundang-Undangan; RUU Perlindungan Data Pribadi.</p>

Hypertension ◽  
2021 ◽  
Vol 77 (4) ◽  
pp. 1029-1035
Author(s):  
Antonia Vlahou ◽  
Dara Hallinan ◽  
Rolf Apweiler ◽  
Angel Argiles ◽  
Joachim Beige ◽  
...  

The General Data Protection Regulation (GDPR) became binding law in the European Union Member States in 2018, as a step toward harmonizing personal data protection legislation in the European Union. The Regulation governs almost all types of personal data processing, hence, also, those pertaining to biomedical research. The purpose of this article is to highlight the main practical issues related to data and biological sample sharing that biomedical researchers face regularly, and to specify how these are addressed in the context of GDPR, after consulting with ethics/legal experts. We identify areas in which clarifications of the GDPR are needed, particularly those related to consent requirements by study participants. Amendments should target the following: (1) restricting exceptions based on national laws and increasing harmonization, (2) confirming the concept of broad consent, and (3) defining a roadmap for secondary use of data. These changes will be achieved by acknowledged learned societies in the field taking the lead in preparing a document giving guidance for the optimal interpretation of the GDPR, which will be finalized following a period of commenting by a broad multistakeholder audience. In parallel, promoting engagement and education of the public in the relevant issues (such as different consent types or residual risk for re-identification), on both local/national and international levels, is considered critical for advancement. We hope that this article will open this broad discussion involving all major stakeholders, toward optimizing the GDPR and allowing a harmonized transnational research approach.


JURISDICTIE ◽  
2021 ◽  
Vol 11 (2) ◽  
pp. 163-181
Author(s):  
Dwi Nugrahayu Devianti ◽  
Prija Djatmika ◽  
Sukarmi Sukarmi

The online loan via financial technology (fintech) is currently a new buzz in Indonesian society. Its facilities and ease in proposing the loan are very much attracting. However, this online loan practice often raises legal issues; one of them is personal data misuse. This article analyzes the usage of other people’s personal data in fintech services. This is a doctrinal legal research with statute approach. The results reveal that personal data protection has yet firmly ruled in legislation. This proves that privacy is not an urgent matter to safeguard. It then implies to the many cases on personal data theft in online loan. The operators of fintech services are responsible to protect customers’ personal data. Those found guilty to misuse the personal data will be subject to criminal sanction.Pinjaman online melalui teknologi finansial menjadi trend baru masyarakat Indonesia. Berbagai fasilitas dan kemudahan dalam pengajuan pinjaman menjadi daya tarik tersendiri. Namun, praktik pinjaman online sering menimbulkan persoalan hukum, salah satunya adalah penyalahgunaan data pribadi. Artikel ini bertujuan menganalisis penggunaan data pribadi orang lain dalam layanan finansial teknologi. Artikel ini berasal dari penelitian hukum doctrinal dengan pendekatan peraturan perundang-undangan. Hasil penelitian ini menunjukkan bahwa perlindungan data pribadi belum diatur secara tegas dalam peraturan perundang-undangan. Kondisi ini menunjukkan bahwa privasi bukan persoalan yang urgen untuk dilindungi. Hal ini berimplikasi terhadap maraknya pencurian data pribadi dalam pinjaman online. Penyelenggara jasa layanan finansial teknologi memiliki tanggung jawab untuk melindungi data pribadi nasabah. Penyelenggara yang terbukti menyalahgunakan data pribadi dapat dikenai sanksi pidana.


Author(s):  
Yudo Arhuma Binardy ◽  

This study aimed to analyze the legal protection arrangements in Indonesia for privacy rights in cases of personal data leakage and to examine the urgency of the establishment of the Personal Data Protection Law as an effort to prevent personal data leakage. This study used a normative juridical research approach, the type of data was secondary data with data collection techniques in the form of library research and documentation studies. The results of this study are that the privacy right gets legal protection in Indonesia through Law Number 19 of 2016 concerning Information and Electronic Transactions, also regulated in its implementing regulations, namely Government Regulation Number 71 of 2019 and Regulation of the Minister of Communication and Information Technology Number 20 of 2016. The regulation has not been able to overcome the rampant cases of privacy rights violations and has not been able to protect the owner of personal data. The stipulation of a personal data protection law as an effort to combat the leakage of personal data is an urgent matter to meet the demands of information disclosure in government institutions and protect individual rights concerning collection, processing, maintenance, dissemination of personal data.


2008 ◽  
Vol 12 (1) ◽  
pp. 63-74
Author(s):  
Calin Veghes

Protection of personal data represents a relatively recent concern for all the entities consumers, organizations and public institutions involved in the development of the direct marketing industry and the overall Romanian market. Noteworthy growth of the direct marketing campaigns, increase in the consumer demands and expectations and the background provided by the countrys adhesion to the European Union, have determined a strong necessity to build up a legal framework for protection of the personal data. Important steps have been made when laws no. 677 (on the protection of the personal data in terms of their processing and free circulation - 2001), no. 506 (on the processing of personal data and protection of privacy in the electronic communications sector - 2004) and no. 102 (regarding the setting up, organization and functioning of the National Supervisory Authority for Personal Data Processing - 2005) have been issued. Adoption of the Directive no. 95/46/EC has connected Romanian and European Union legal framework of the personal data protection. Enforcement of the existing legal background has revealed several problems that have affected activities conducted mainly by the direct marketing and marketing research companies. Relatively unclear definition of the content of personal data to be protected appeared to be one of the most important. From this point, at least the following questions should be answered:what is the specific meaning of the personal data? What data is personal and must be protected through dedicated laws and regulations?are public initiatives best ways and public institutions sole entities to handle the development of an effective legal background for the personal data protection?how important is the voice of the consumers in the process of development of a regulatory environment in this area? Should those to be protected represent the main source of initiating and building the related legal framework?An exploratory survey on a sample including 96 Romanian urban consumers aged 18 to 45 has been conducted aiming to provide information on the: importance of the data protection for the consumers, main characteristics of the data protection legal environment (area of protection, public-private, respectively national-international relationships in terms of the data protection, need for national or international laws and regulations), content of the personal data to be protected by a more precisely defined object of the law, consumer preferences regarding the opt-in and opt-out mechanisms, knowledge associated to the legal rights of consumers related to the personal data protection as they are granted through the existing law, major risks associated with the absence or improper personal data protection mechanisms, consumers exposure to the personal communication media, preferences for personal sources of information and perceived importance of personalization as potential factors to be considered for the development of the personal data protection legal framework, opportunity to develop and implement a Robinson list.Results of the survey may serve as a starting point for a future research conducted at the level of a national representative sample and the Romanian experience may be considered for the upcoming effort to develop a legal framework of the personal data protection in the European Union based on the consumers views, needs and expectations.


Author(s):  
Tapiwa V Warikandwa

The contemporary global financial services market has witnessed a substantial increase in cybercrime which places consumers’ personal data at risk. Rapid increases in cybercrime linked to the financial services market have driven financial market regulators to pass novel laws and regulations aimed at curbing the rate of occurrence of cybercrimes connected to personal data sharing. To that end, banks and/or financial services companies in Europe have swiftly moved to comply with the European Union’s General Data Protection Regulation. Whilst personal data protection regulation is not a new concept in Europe, most African countries (with exception of South Africa) do not have laws and regulations on personal data protection. With the financial services market being extremely vulnerable to cyber risks owing to the digitisation of the financial services sector, it is important to assess the suitability of South Africa’s current regulatory framework concerning the protection of personal data. This article thus examines South Africa’s Protection of Personal Information Act 4 of 2013 with a view to ascertaining its suitability and/or adequacy in protecting personal data in the country’s financial services market. With the global Covid-19 pandemic bringing about concerns related to rapid increases in cyber-attacks in the financial services market owing to the increased sharing of the sensitive personal data of consumers, there is also need to test the POPIA’s conformity with the strict European Union GDPR personal data protection guidelines.


Law Review ◽  
2020 ◽  
Vol 19 (3) ◽  
pp. 326
Author(s):  
Glenn Wijaya

<pre><strong><em>Abstract</em></strong></pre><pre><em><br /></em></pre><pre><em><br /></em></pre><pre><em>Cases of leakage and misuse of personal data continue to increase in Indonesia along with the increasing activity of the digital economy, especially in the era of the COVID-19 pandemic. However, the existing laws and regulations, or what is called as the ius constitutum relating to the protection of personal data are still sectoral in nature so that they are not centralized and there are no regulations at the level of law, so that criminal sanctions are not maximally applied to criminals in this sector. Now, the Indonesian House of Representatives (DPR) is drafting a Personal Data Protection Bill (“PDP Bill”), which in general follows the standards set out in the GDPR, which in the near future is expected to become an ius constitutum that can solve problems related to the protection of personal data in Indonesia. In this article, the author will discuss what are the shortcomings of the existing ius constitutum and also discuss new things and criticisms of the provisions in the ius constituendum, namely the PDP Bill. The research method used by the author is normative legal research by examining, primarily, the existing laws and regulations in Indonesia relating to the protection of personal data along with the PDP Bill. The author then also provides several recommendations to the Government, Electronic System Administrators, and also the general public regarding the development of the PDP Bill and the status quo of personal data protection in Indonesia.</em><em></em></pre><pre><strong><em> </em></strong></pre><pre><strong><em><br /></em></strong></pre><pre><strong><em><br /></em></strong></pre><pre><strong><em>Keywords: Personal Data Protection, Ius Constitutum, Ius Constituendum</em></strong><strong><em></em></strong></pre><p><strong> </strong></p><p><strong>Abstrak</strong></p><p>Kasus kebocoran dan penyalahgunaan data pribadi terus meningkat di Indonesia seiring dengan meningkatnya aktivitas ekonomi digital, terlebih di era pandemi COVID-19. Namun, peraturan perundang-undangan yang sudah ada, atau disebut <em>ius constitutum</em> terkait pelindungan data pribadi masih bersifat sektoral sehingga belum terpusat dan tidak ada pengaturan di setingkat undang-undang, sehingga sanksi pidana pun masih belum maksimal diterapkan kepada para pelaku kejahatan di sektor ini. Kini, DPR sedang menyusun RUU Perlindungan Data Pribadi (“RUU PDP”), yang secara garis besar mengikuti standar yang ada dalam GDPR, yang dalam waktu dekat diharapkan akan menjadi<em> ius constitutum </em>yang dapat mengatasi permasalahan terkait pelindungan data pribadi di Indonesia. Dalam artikel ini, Penulis akan membahas apa saja yang menjadi kekurangan dari <em>ius constitutum</em> yang ada dan juga mengupas apa saja hal-hal baru beserta kritik terhadap pengaturan dalam <em>ius constituendum</em>, yaitu RUU PDP. Metode penelitian yang dipakai Penulis adalah penelitian hukum secara normatif dengan mengkaji, terutama, peraturan perundang-undangan yang sudah berlaku di Indonesia terkait dengan pelindungan data pribadi beserta draf RUU PDP. Penulis lalu juga memberikan beberapa rekomendasi kepada Pemerintah, Penyelenggara Sistem Elektronik, dan juga masyarakat umum terkait perkembangan RUU PDP dan <em>status quo</em> pelindungan data pribadi di Indonesia.</p><p><strong>Kata Kunci:</strong><strong> Pelindungan Data Pribadi, <em>Ius Constitutum</em>, <em>Ius Constituendum</em></strong></p>


2017 ◽  
Vol 2017 (1) ◽  
pp. 35-44
Author(s):  
Dawid Zadura

Abstract In the review below the author presents a general overview of the selected contemporary legal issues related to the present growth of the aviation industry and the development of aviation technologies. The review is focused on the questions at the intersection of aviation law and personal data protection law. Massive processing of passenger data (Passenger Name Record, PNR) in IT systems is a daily activity for the contemporary aviation industry. Simultaneously, since the mid- 1990s we can observe the rapid growth of personal data protection law as a very new branch of the law. The importance of this new branch of the law for the aviation industry is however still questionable and unclear. This article includes the summary of the author’s own research conducted between 2011 and 2017, in particular his audits in LOT Polish Airlines (June 2011-April 2013) and Lublin Airport (July - September 2013) and the author’s analyses of public information shared by International Civil Aviation Organization (ICAO), International Air Transport Association (IATA), Association of European Airlines (AEA), Civil Aviation Authority (ULC) and (GIODO). The purpose of the author’s research was to determine the applicability of the implementation of technical and organizational measures established by personal data protection law in aviation industry entities.


Author(s):  
Yanis Arturovich Sekste ◽  
Anna Sergeevna Markevich

The subject of this research is the problems emerging in the process of establishment and development of the Institution of personal data protection in the Russian Federation. Special attention is turned to the comparison of Soviet and Western models of protection of private life and personal data. The authors used interdisciplinary approach, as comprehensive and coherent understanding of socio-legal institution of personal data protection in the Russian Federation is only possible in inseparable connection with examination of peculiarities of the key historical stages in legal regulation of private life of the citizen. After dissolution of the Soviet political and legal system, the primary task of Russian law consisted in development and legal formalization of the institution of protection of human and civil rights and freedoms, first and foremost by means of restricting invasion of privacy by the state and enjoyment of personal freedom. It is concluded that the peculiarities of development of the new Russian political and legal model significantly impacted the formation of the institution of personal data protection in the Russian Federation. The authors believe that the Russian legislator and competent government branches are not always capable to manage the entire information flow of personal data; therefore, one of the priority tasks in modern Russian society is the permanent analysis and constant monitoring of the development of information technologies.


Sign in / Sign up

Export Citation Format

Share Document