•  
  •  
 

Abstract

This research analyses on personal data protection with a foreign element as a private international law issue, focusing on competent forum and applicable law. The author uses a juridical-normative research method with literature studies to explain the relevant private international law principles, as well as Indonesian laws and regulations surrounding competent forum and applicable law regarding competent forum and applicable law on personal data protection with a foreign element. The study found that various private international law principles may be used to determine the applicable law in personal data protection with a foreign element dispute, such as nationality, place where the tort occurred, or center of gravity. Indonesian courts are also competent to examine personal data protection with a foreign element case under Indonesian law. This study also elaborates practical implementation personal data protection with a foreign element, in particular on the competent forum and applicable law, as shown in the businesses Intercompany Agreement on Data Processing by X group company and in a cross-border acquisition transaction.

References

Legal Documents

Council of Europe. Convention for the Protection of Individuals with Regard to Automatic Processing of Personal Data. Council of Europe Treaty Series No. 108 (1981).

Dutch East Indies (now Indonesia). Algemene Bepalingen van Wetgeving voor Indonesie. (General Provisions of Legislation for Indonesia).

Dutch East Indies (now Indonesia). Burgerlijk Wetboek (Civil Code). Translated by Prof. R. Subekti, S.H. and R. Tjitrosudibio. Jakarta: 2017, Balai Pustaka.

Dutch East Indies (now Indonesia). Het Herziene Indonesich Reglement. (Updated Indonesian Reglement).

Dutch East Indies (now Indonesia). Indische Staatsregeling. (Indian Constitution).

Dutch East Indies (now Indonesia). Reglement op de Burgerlijke Rechtsvordering. (Regulations on Civil Procedure).

European Union. Directive of the European Parliament and of the Council on the Protection of Individuals with Regard to the Processing of Personal Data and on the Free Movement of Such Data. OJ L 281, 23.11.1995, p. 31–50.

European Union. Regulation of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and of the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation). OJ L 119, 4.5.2016, p. 1–88.

Organisation for Economic Cooperation and Development (OECD). Guidelines Governing the Protection of Privacy and Transborder Flow of Personal Data.

Indonesia. Peraturan Menteri Komunikasi dan Informatika tentang Perlindungan Data Pribadi dalam Sistem Elektronik. Permenkominfo No. 20 Tahun 2016 (Minister of Communication and Informatics Regulation on the Personal Data Protection in Electronic Systems. (MoCI Reg. 20 of 2016).

Indonesia. Peraturan Pemerintah tentang Penyelenggaraan Sistem dan Transaksi Elektronik. PP No. 71 Tahun 2019. (Government Regulation on the Implementation of Electronic Systems and Transaction. GR No. 71 of 2019).

Indonesia. Undang-Undang Dasar 1945. (The 1945 Constitution of the Republic of Indonesia).

Indonesia. Undang-Undang tentang Pengesahan International Covenant on Civil and Political Rights (Kovenan Internasional tentang Hak-Hak Sipil dan Politik). UU No. 12 Tahun 2005. (Law on the Ratification of the International Covenant on Civil and Political Rights. Law No. 12 of 2005).

Indonesia. Undang-Undang tentang Perlindungan Data Pribadi. UU No. 27 Tahun 2022. (Law on Personal Data Protection. Law No. 27 of 2022).

Indonesia. Undang-Undang tentang Perseroan Terbatas. UU No. 40 Tahun 2007. (Law on Limited Liability Company. Law No. 40 of 2007).

Indonesia. Undang-Undang tentang Perubahan atas Undang-Undang Nomor 11 Tahun 2008 tentang Informasi dan Transaksi Elektronik. (Law on Amendments to Law Number 11 of 2008 on Electronic Information and Transactions. Law No. 19 of 2016).

International Covenant on Civil and Political Rights. 999 UNTS 171 (opened for signature 16 December 1966, entered into force 23 March 1976).

Universal Declaration of Human Rights. 217 A (III).

Books

Amiruddin, Zainal Asikin. Pengantar Metode Penelitian Hukum [Introduction to Legal Research Methods]. Raja Grafindo Persada, 2012.

Basuki, Zulfa Joko. et al. Hukum Perdata Internasional [Private International Law]. Universitas Terbuka, 2014.

Gautama, Sudargo. Hukum Perdata Internasional Indonesia Jilid III Bagian I Buku ke-7 [Indonesian Private International Law Volume III Part I 7th Book]. PT Alumni, 2010.

Gautama, Sudargo. Pengantar Hukum Perdata Internasional Indonesia [Introduction to Indonesian Private International Law]. Binacipta, 1987.

Holvast, J. "The Protection of Privacy." in The History of Information Security: A Comprehensive Handbook, edited by Karl de Leeuw and Jan Bergstra. Elsevier Science, 2007.

Marton, Edina. Violations of Personality Rights through the Internet: Jurisdictional Issues under European Law. Nomos, 2016.

Soekanto, Soerjono. Pengantar Penelitian Hukum [Introduction to Legal Research]. UI Press, 2015.

Voigt, Paul and Axel von dem Bussche. The EU General Data Protection Regulation (GDPR). Springer Nature, 2017.

Journal

Bigos, Oren. "Jurisdiction over Cross-Border Wrongs on the Internet." The International and Comparative Law Quarterly 54 (2005): 585-620.

Lutzi, Tobias. "Internet Cases in EU Private International Law-Developing A Coherent Approach." International and Comparative Law Quarterly 66 (2017): 687-721.

Mangku, Dewa Gede Sudika. et al. "The Personal Data Protection of Internet Users in Indonesia." Journal of Southwest Jiaotong University 56 (2021): 202-209.

Mantelero, Allesandro. "The Future of Data Protection: Gold Standard vs. Global Standard." Computer Law & Security Review 40 (2021): 1-7.

McManus, Hugh S. “Conflict of Laws: The “Center of Gravity” Theory Applied to Torts: Babcock v. Jackson”. Marquette Law Review 47 (1963): 255-264.

Internet

Clement, J. "Market Value of the Largest Internet Companies Worldwide 2021." https://www.statista.com/statistics/277483/market-value-of-the-largest-internet-companies-worldwide/. Accessed 18 April 2022.

Data Reportal. "Digital 2021: Indonesia." https://datareportal.com/reports/digital-2021-indonesia. Accessed 7 February 2022.

Data Reportal. "Digital 2022: Global Overview Report." https://datareportal.com/reports/digital-2022-global-overview-report. Accessed 7 February 2022.

European Union. "Types of Legislation." https://european-union.europa.eu/institutions-law-budget/law/types-legislation_en. Accessed 18 April 2022.

Semrush. "Most Visited Websites by Traffic in Indonesia for all categories, June 2022." https://www.semrush.com/website/top/indonesia/all/. Accessed 8 February 2022.

Miscellaneous

X Group Company. Intercompany Agreement on Data Processing. 27 September 2021.

Tisnadisastra, Abadi Abi. "Introduction to Indonesia Personal Data Protection Regulatory Framework." The presentation was delivered at the Days of Law Career 2022 workshop, Depok, 11 February 2022.

Download

Share

COinS