Alongside with the growth of the digital technology in human’s daily life, the amount of digital data is continuously accumulated. The existence of the digital data then being processed to create more innovation that can alleviate the social problem within the society. However, it is also noteworthy that the presence of abundant digital data without proper management and protection mechanism may result in the emersion of cybercrime. Then, in the government and business sector, there grows a need of data classification mechanism as a fundamental instrument to formulate an effective, cost-friendly and well-targeted digital data protection mechanism.
As a mean to provide broader discourse toward the problem above, Center for Digital Society, in coordination with the Ministry of Communication and Informatics of the Republic of Indonesia, held the notable experts meeting with the topic of ‘data classification in the cloud computing era – public policy discussion preparing for the revision of Peraturan Presiden (Presidential Decree) 82/2012.’
The event, which was located at University Club Universitas Gadjah Mada (28/9) invites more than 30 experts from the financial service industry, manufacture, health, and oil & gas sector. Some of the involved institutions are Bank Indonesia (the central bank of Indonesia), Otoritas Jasa Keuangan, The Ministry of Health, BPJS Kesehatan, BPOM, PERBANAS (Persatuan Bank Nasional), ACCI (Asosiasi Cloud Computing Indonesia) and also ICCA (Indonesia Corporate Counsel Association).
Data Classification as a catalyst toward data management and protection in Indonesia
In this expert meeting, the main discussion was being aimed at the revision process toward the presidential decree 82/2012 regarding electronic system & transaction in Indonesia. As mentioned by Semuel A. Pangerapan – the director general of application & informatics of the ministry of communication & informatics – data can be divided into three categories; low-risk data, high-risk data and strategic data. The existence of data classification mechanism can be a pivotal point to determine the direction of policymaking in Indonesia regarding the digital data management and protection.
Then, Tony Seno from the Asosiasi Cloud Computing Indonesia (ACCI) mentioned that the cloud computing technology could be a pinpoint solution in supporting the data management. Nevertheless, there is still an ongoing debate regarding the utilization of cloud computing. On one side, cloud computing technology provides a multi-dimension solution for data management and storage. On the other hand, there is an issue with the data safety and data sovereignty.
Furthermore, Ingkan Simanjuntak from Indonesian Corporate Counsel Association added that the absence of regulation regarding data classification causes business actors in Indonesia to face difficulty in developing their business or receiving investment. Hence, as mentioned by Widyawan from Universitas Gadjah Mada in the next session, cloud computing can be maximized as a place to store data that can be accessed by the public, and the strategic data remain to be stored on the offline data server.
The stakeholders need to move together to determine the criterion and indicator of low-risk data, high-risk data and strategic data. Furthermore, Semuel A. Pangerapan also wants to empower full and active participation from institusi pengawas dan pengatur sektor (IPPS) as a superintendent which oversee data management in each sector.
Responding to the need for data classification in multiple sectors in Indonesia
Moving into the next session, the expert meeting was followed by a breakout session in four areas; financial service industry, health, manufacture, and oil & gas. Experts in each sector gather according to their expertise to conduct a focus group discussion regarding data classification and progress in each industry.
The discussion in each sector produces multiple outcomes that can enrich the discourse of data classification in Indonesia. In the financial service industry sector, for instance, the experts and moderator emphasize the point of discussion toward the role of sectoral authority to oversee the practice of data classification. Furthermore, the experts also agree that the process of data classification should be fostered to support the flow of financial service industry-related data, particularly in the today’s era that has been heavily influenced by the presence of technology.
Then, in the oil & gas sector, the mounting point of discussion was pointed to the harmonization of data categorization within the Perpres 82/2012 with the existing sectoral policies in the oil & gas sector. This process will be able to minimize the conflict of interest and inefficiency in data management, which in the end can provide more growth opportunities for the oil & gas sector.
While in the health sector, the discussion resulted in the agreement over the type of data that can be categorized as low-risk, high-risk and strategic data. The experts and moderator suggest that the data classification need to be aligned with the existing regulation in health sectors. Furthermore, another vocal point was regarding the issue of data safety. Especially in the health sector, mismanagement of data that contain crucial and private information can result in huge loss and also the rise of conflict between parties.
Next, in the manufacture session, the experts consider that data classification is the key to stimulate more growth in the manufacturing sector. The participants believe that government or private institution in manufacture area can be given more significant responsibility and authority to conduct self-assessment over the data. This mechanism can provide more flexibility and avoid further government intervention over the flow of data.
The experts and stakeholders meeting is an essential moment which able to gather opinion, idea and current information regarding data classification in cloud computing era nowadays. The development of the technology needs to be anticipated accordingly without discrediting the principles that have been regulated under the constitution. It is hoped that this meeting can be a catalyst for the government and business sector in Indonesia to foster the process of data classification formulation as a gate to move to the next step of digitalization process of Indonesia.
Written by: Fahreza Daniswara