Criminal Sanctions as a Consequence of Negligence by Data Controllers In Personal Data Breaches

Yanu Romansyah Melvando; Milda Istiqomah; Yuliati Yuliati

doi:10.26623/jic.v10i3.12078

Authors

Yanu Romansyah Melvando Brawijaya University
Milda Istiqomah Brawijaya University
Yuliati Yuliati Brawijaya University

DOI:

https://doi.org/10.26623/jic.v10i3.12078

Keywords:

Criminal Sanctions, Legal Vacuum, Personal Data Controller

Abstract

This research aims to analyse criminal sanctions due to negligence of personal data controllers that cause data leaks based on Law No. 27 of 2022 on Personal Data Protection (PDP Law). The increasing incidents of personal data leakage in Indonesia indicate weak legal protection related to personal data control. Meanwhile, the PDP Law does not explicitly regulate culpa, resulting in legal uncertainty and potential impunity for perpetrators. This research is important because there is a legal vacuum related to the liability of negligent data controllers and the weak deterrent effect of administrative sanctions that have been applied so far. This research uses a normative juridical method with a statutory approach, examining existing legal norms related to personal data protection, especially the PDP Law. The results show that the PDP Law has not expressly regulated the negligence of data controllers, resulting in a legal vacuum and weakening the enforcement of personal data protection. Therefore, this research offers a new norm formulation that explicitly regulates criminal sanctions for data controller negligence and criminal liability for negligent data controllers. Thus, the a need for reformulation of criminal norms against negligence to increase legal certainty and protect the rights of personal data owners in Indonesia.

References

Angnesia, Khetrina Maria, and Sidi Ahyar Wiraguna. “Analisis Pertanggungjawaban Hukum Pemerintah Dalam Menegakkan Pelindungan Data Pribadi Di Era Digital.” Perspektif Administrasi Publik Dan Hukum 2, no. 2 (2025): 176–87. https://doi.org/https://doi.org/10.62383/perspektif.v2i2.249.

Ariesta, Kadek, Dwi Anggara, I Made Minggu, Widyantara I Wayan, and Kartika Jaya. “Analisis Hukum Terhadap Pencurian Data Administrasi Kependudukan Dalam Perspektif Undang-Undang Nomor 27 Tahun 2022 Tentang Perlindungan Data Pribadi.” Jurnal Analogi Hukum 6, no. 3 (2024): 330–35. https://doi.org/https://doi.org/10.22225/jah.6.3.2024.330-335.

Desti Fitri Anggranei, Ikama Dewi Setia Triana, M. Syamsudin. “Perlindungan Hukum Bagi Pengguna Akun Shopee Paylater Dari Tindak Pidana Peretasan Data.” Cakrawala Hukum 27, no. 1 (2025): 1–9. https://doi.org/https://doi.org/10.51921/chk.5ecj0j76.

Disemadi, Hari Sutra. “Urgensi Regulasi Khusus Dan Pemanfaatan Artificial Intelligence Dalam Mewujudkan Perlindungan Data Pribadi Di Indonesia.” Jurnal Wawasan Yuridika 5, no. 2 (2021): 177–99. https://doi.org/10.25072/jwy.v5i2.460.

Edbert, Felicia, and Moody Rizqy Syailendra Putra. “Pertanggungjawaban Hukum Terhadap Kebocoran Data Pribadi Pada Perusahaan Pengelola Jasa Keuangan Berbasis IT.” Unes Law Review 6, no. 2 (2023): 5966–77. https://doi.org/https://doi.org/10.31933/unesrev.v6i1.

Erlina Maria Christin Sinaga, Mery Christian Putri. “Formulasi Legislasi Perlindungan Data Pribadi Dalam Revolusi Industri 4.0.” Jurnal RechtVinding 9, no. 2 (2020): 237–56. https://doi.org/http://dx.doi.org/10.33331/rechtsvinding.v9i2.428.

Fikriatul Nabila, Imran Bukhari Razief, Amiludin. “Evaluasi Terhadap Kebocoran Data Dalam Sistem Perbankan Di Indonesia (Studi Kasus Ransomware Pada Bank Syariah Indonesia).” Al-Qisth Law Review 7, no. 2 (2024): 295–310. https://doi.org/https://doi.org/10.24853/al-qisth.7.2.295-310.

Fransiscus Xaverius Watkat, Muhammad Toha Ingratubun, Muhammad Hafiz Ingsaputro, Arie Tri Hartantyo. “Pertanggungjawaban Pidana Pengendali Data Pribadi Terhadap Kebocoran Data Pribadi.” Jurnal Hukum Ius Publicum 5, no. 2 (2024): 177–98. https://doi.org/10.55551/jip.v5i2.175.

Hadi, Abdul, and Bima Guntara. “Pembaharuan Hukum Nasional Dalam Upaya Perlindungan Data Pribadi Di Era Distrupsi Kecerdasan Buatan (Artificial Intelligence).” Jurnal Hukum Mimbar Justitia 8, no. 1 (2022): 233–53. https://doi.org/10.35194/jhmj.v8i1.2426.

Hariwibowo, Fatnan Setyo. “Analisis Regulasi Telemedicine : Perlindungan Hukum Dan Implikasi Bagi Tenaga Kesehatan.” In Masyarakat Hukum Kesehatan Indonesia, 149–58, 2024.

Hisbulloh, Moh Hamzah. “Urgensi Rancangan Undang-Undang (RUU) Perlindungan Data Pribadi.” Jurnal Hukum 37, no. 2 (2021): 119–33. https://doi.org/10.26532/jh.v37i2.16272.

Indra, Indra, Trihoni Nalesti Dewi, and Daniel Budi Wibowo. “Perlindungan Kerahasiaan Data Pasien vs Kewajiban Membuka Akses Rekam Medis Elektronik.” Soepra Jurnal Hukum Kesehatan 10, no. 1 (2024): 97–117. https://doi.org/10.24167/sjhk.v10i1.11542.

Mahameru, Danil Erlangga, Aisyah Nurhalizah, Ahmad Wildan, Mochamad Haikal, and Mohamad Haikal Rahmadia. “Implementasi UU Perlindungan Data Pribadi Terhadap Keamanan Informasi Identitas Di Indonesia.” Jurnal Esesnsi Hukum 5, no. 2 (2023): 115–31. https://doi.org/https://doi.org/10.35586/jsh.v5i2.240.

Maharani, Rista, and Andria Luhur Prakoso. “Perlindungan Data Pribadi Konsumen Oleh Penyelenggara Sistem Elektronik Dalam Transaksi Digital.” Jurnal USM Law Review 7, no. 1 (2024): 333–47. https://doi.org/10.26623/julr.v7i1.8705.

Marpaung, Leden. Asas-Teori-Praktik Hukum Pidana. Jakarta: Sinar Grafika, 2005.

Matheus, Juan, and Ariawan Gunadi. “Pembentukan Lembaga Pengawas Perlindungan Data Pribadi Di Era Ekonomi Digital : Kajian Perbandingan Dengan KPPU.” Justisi 10, no. 1 (2023): 20–35. https://doi.org/10.33506/jurnaljustisi.v10i1.2757.

Nawawi, Barda. Pembaharuan Hukum Pidana Dalam Perspektif Kajian Perbandingan. Bandung: PT Citra Aditya Bakti, 2005.

Ni Made Dwi Gayatri Putri, Ni Luh Made Mahendrawati, Ni Made Puspasutari Ujianti. “Perlindungan Hukum Terhadap Data Pribadi Warga Negara Indonesia Berdasarkan Undang-Undang Nomor 27 Tahun 2022.” Jurnal Preferensi Hukum 5, no. 2 (2024): 240–45. https://doi.org/https://doi.org/10.22225/jph.5.2.2024.240-245 Perlindungan.

Niffari, Hanifan. “Perlindungan Data Pribadi Sebagai Bagian Dari Hak Asasi Manusia Atas Perlindungan Diri Pribadi (Suatu Tinjauan Komparatif Dengan Peraturan Perundang-Undangan Di Negara Lain).” Jurnal Yuridis 7, no. 1 (2020): 105–19. https://doi.org/10.35814/selisik.v6i1.1699.

Priliasari, Erna. “Legal Protection of Consumer Personal Data in E-Commerce According To Laws Dan Regulations in Indonesia.” Jurnal Rechts Vinding 12, no. 2 (2023): 261–79. https://doi.org/http://dx.doi.org/10.33331/rechtsvinding.v12i2.1285.

———. “Pentingnya Perlindungan Data Pribadi Dalam Transaksi Pinjaman.” Majalah Hukum Nasional 49, no. 2 (2019): 1–27.

Purnama, Thiara Dewi, and Abdurrakhman Alhakim. “Pentingnya UU Perlindungan Data Pribadi Sebagai Bentuk Perlindungan Hukum Terhadap Privasi Di Indonesia.” E-Journal Komunitas Yustisia 4, no. 3 (2021): 273–83. https://doi.org/https://doi.org/10.23887/jatayu.v4i3.44370.

Raharjo, Satjipto. Ilmu Hukum. Bandung: PT. Citra Aditya Bakti, 2000.

Sakijo, Aruan. Hukum Pidana Dasar Aturan Umum Hukum Pidana Kodifikasi. Jakarta: Ghalia Indonesia, 1990.

Sangojoyo, Bram Freedrik, Aurelius Kevin, and David Brilian Sunlaydi. “Urgensi Pembaharuan Hukum Mengenai Perlindungan Data Pribadi E-Commerce Di Indonesia.” Kosmik Hukum 22, no. 1 (2022): 27–39. https://doi.org/10.30595/kosmikhukum.v22i1.12154.

Setiawan, Hezkiel Bram, and Fatma Ulfatun Najicha. “Perlindungan Data Pribadi Warga Negara Indonesia Terkait Dengan Kebocoran Data.” Jurnal Kewarganegaraan 6, no. 1 (2022): 976–82. https://doi.org/https://doi.org/10.31316/jk.v6i1.2657.

Shafa Salsabila, Sidi Ahyar Wiraguna. “Pertanggungjawaban Hukum Atas Pelanggaran Data Pribadi Dalam Perspektif Undang-Undang Pelindungan Data Pribadi Indonesia.” Konsensus : Jurnal Ilmu Pertahanan, Hukum Dan Ilmu Komunikasi 2, no. 2 (2025): 145–57. https://doi.org/https://doi.org/10.62383/konsensus.v2i2.736.

Siahaan, Albert Lodewyk Sentosa. “Urgency of Personal Data Protection on Marketplace Platforms Against Technological Advances.” Majalah Hukum Nasional 52, no. 2 (2022): 209–23. https://doi.org/10.33331/ mhn.v52i2.169.

Sulistianingsih, Dewi, Miftakhul Ihwan, Andry Setiawan, and Muchammad Shidqon Prabowo. “Tata Kelola Perlindungan Data Pribadi Di Era Metaverse (Telaah Yuridis Undang-Undang Perlindungan Data Pribadi).” Masalah-Masalah Hukum 52, no. 1 (2023): 97–106. https://doi.org/10.14710/mmh.52.1.2023.97-106.

Tsamara, Nadiah. “Perbandingan Aturan Perlindungan Privasi Atas Data Pribadi Antara Indonesia Dengan Beberapa Negara.” Jurnal Suara Hukum 3, no. 1 (2021): 53–85. https://doi.org/10.26740/jsh.v3n1.p53-84.