[PRESS RELEASE] Multi-Stakeholder Efforts in Personal Data Protection in Indonesia | Digital Expert Talks #6 with Meta
November 21, 2021 9:59 pm ||
Yogyakarta, 18 November 2021 – The PDP Bill is one way to encourage digital transformation to protect citizens’ digital rights. However, this needs to be also supported by solid digital governance, especially in protecting personal data in Indonesia. To make it happen requires coordination of the roles of various stakeholders, ranging from the community, private sector to platforms. Responding to this phenomenon, CfDS collaborated with Meta to hold Digital Expert Talks #6 with the theme Multi-Stakeholder Efforts in Personal Data Protection in Indonesia, with speakers Semuel Abrijani Pangerapan (Dirjen Aptika Kominfo RI), Rizki Aulia Rahman Natakusumah (Member of the Indonesian House of Representatives Commission), Arianne Jimenez (Facebook APAC Privacy and Public Policy Manager), Ardi Sutedja (Indonesia Cyber Security Forum (ICSF)). This activity is broadcast live through Facebook (http://ugm.id/liveDET6FB) and Youtube (http://ugm.id/liveDET6)
Kominfo’s Preparation in the Implementation of the PDP Bill
Samuel started the event by telling us the dynamics of the substance in the PDP Bill have changed along with the industry’s transformation. To accommodate the needs of various parties, Kominfo has held meetings with multiple associations to obtain input regarding protecting personal data. Kominfo also opened communication with various parties and forums to prepare for the implementation of the PDP Bill. He hoped that all stakeholders would be aware when the PDP Law is implemented, both the public as data subjects and companies as data controllers.
In addition, Samuel said that he strove for education, socialization, training, and guidance to continue to be carried out to raise citizen awareness of their rights in the digital era. The Ministry of Communication and Informatics also carries out digital literacy education collaborated with DPR Commission I, which he hoped can grow the critical power of the community regarding personal policies. He considered, “Without building an imaginative rationality, people won’t ready doing activities in digital space, so we need to teach how to enforce and secure personal data to create rationality in the digital world.”
The Dynamics of Drafting the PDP Bill
According to Rizki Aulia, it was not easy to accommodate the interests of many people in the PDP Bill. He told about the involvement of many stakeholders such as think tanks, experts, community social institutions, and the private sector to help legislator channel their dynamic interests. Rizki emphasized that the principle of drafting the PDP Bill is equality between the public and the private sector in protecting and protecting their data.
Currently, in the PDP Bill discussion, the majority already have an agreement, although there are still slight differences in views related to supervisory institutions. The legislator advocated a supervisory agency that is objective and independent to create equality between sectors. According to him, this independence is being discussed, which he hoped would reach a common ground with the government and Kominfo. However, he also reminded, “Don’t imagine if the discussion between the government and legislators is problematic. In fact, we meet continuously discussing and has agreed upon many things between the Commission I faction, DPR RI, & the government.”
Personal Data Protection Policy Formulation Direction
As a platform, Meta has collaborated with numerous countries to discuss personal data protection regulations. As the Privacy and Public Policy Manager of Facebook APAC, Arianne Jimenez provided several points to be considered for easy compliance in personal data protection regulation. She mentioned that submission must come from self-awareness, the law must have a risk-based approach, be technologically neutral, and use minimal data.
Arianne added that in protecting personal data, all parties must have the same perception regarding their data rights and respect each other’s data, especially for companies that hold personal data. On the other hand, the government is obliged to protect the data of its citizens by enacting laws and education. Arianne stated that the character of ideal regulation has a single independent regulatory agency. It also empowers to enforce laws in innovative ways that involve regulatory tools (such as a regulatory sandbox or policy prototyping programs). Further, taking broad input from various stakeholders and lastly providing guidance & education to both public and private organizations. She also suggested, “To ensure Indonesia data protection authority included in global privacy assembly, typically members of that are independent authorities.”
Steps to Protect People’s Digital Rights
Ardi Sutedja as representative of the Indonesia Cyber Security Forum (ICSF), explained that understanding personal data protection mustn’t only see the legal aspects but other aspects such as technology and cyber security. He also noted that in protecting the digital rights of the community, the regulation must be accepted by the community first. He also stated that three pillars of PDP acceptance need to be built, namely trust, reputation, and accountability. Even though there will be a PDP law in the future, if three pillars are not taken into account properly, data leaks are likely to occur still. According to Ardi, to protect public data and mitigate problems that may arise, it is necessary to immediately ratify the PDP Bill to deal with issues that arise. In addition, other ways were to cooperate in forums to discuss by exploring possible problems encountered in the field.
Finally, Ardi emphasized the importance of a personal data protection institution called SRO (self-regulated organization). According to him, “The government plays a strategic role in building the three pillars so that if competent, multidisciplinary experts who understand law & tech do not supervise it will be difficult to see from the helicopter’s point of view and build the three pillars.”
Writer: Dea Arum K.
Editor: Firya Qurratu’ain Abisono