On Thursday (February 27, 2025), Perum PERURI held a legal awareness session titled “Implementation of the Personal Data Protection Act (PDP).” The event was held at Perum PERURI in Parung Mulya Village, Karawang, West Java. The purpose of the “Implementation of the Personal Data Protection Act (PDP)” legal awareness session at Perum PERURI was to deepen employees’ understanding of the PDP Act, including its principles, rights, obligations, and penalties. The event also aimed to raise awareness about personal data security in company operations and the risks associated with violations. Additionally, the session provided practical skills for identifying, analyzing, and mitigating data processing risks in the workplace. The goal was to ensure compliance by Perum PERURI and its employees with the PDP Law and to foster an organizational culture that upholds privacy and data protection as part of good corporate governance.
Through this initiative, it is hoped that the principles of personal data protection will be internalized across all operational levels of the company. Employees are expected to apply the knowledge gained in their daily work, thereby fostering a data-conscious culture and minimizing the risk of violations. Additionally, this initiative is expected to strengthen Perum PERURI’s data security systems by raising awareness of cyber threats and promoting best practices for protecting data from unauthorized access, loss, or misuse. Furthermore, this training is intended to serve as a foundation for Perum PERURI to develop internal policies and procedures aligned with the Personal Data Protection Act (PDP Act), as well as to establish a comprehensive and sustainable data governance framework. Ultimately, this initiative contributes to enhancing the company’s reputation as a responsible and trustworthy entity in the management of personal data, while supporting the creation of a safe and equitable digital environment for the entire community.
The event began at 9:00 a.m. with opening remarks by Dr. Heribertus Jaka Triyana, S.H., LL.M., M.A., Vice Dean for Research, Community Service, and Information Systems. The moderators for this event were Dr. Ninik Damini, S.H., M.Hum, and Dr. Agustina Merdekawati, S.H., LL.M.
The first session was led by Bhredipta Socarana, S.H., LL.M., CCIP/E. During his session, Bhredipta explained that data protection principles include limited, lawful, and transparent data processing. Data controllers and processors are required to obtain consent from data subjects, report violations, and manage rights regarding access, correction, and deletion of data. The implementation of the Personal Data Protection Act (PDP Act) faces challenges such as a lack of technological readiness and understanding. Risk management, internal policies, employee training, and routine audits are necessary to comply with the PDP Act and effectively protect data.
The next session was presented by Dr. Guntur Dharma Putra and Muhammad Jibril, S.H., M.PrivateLaw. Guntur noted that legal education on the Personal Data Protection Act (PDP Act) at Perum PERURI is crucial, given the rapid advancement of technology and the rise of cybercrime that threatens personal data. The recently enacted Personal Data Protection Act (PDP Act) serves as a vital legal framework to protect citizens’ constitutional right to privacy. However, awareness of privacy still needs to be improved, as this concept is relatively new in Indonesian culture.
Cybersecurity and personal data protection are interrelated, though distinct. The Personal Data Protection Act (PDP Act) governs the rights of data subjects, the obligations of data controllers and processors, and penalties for violators. Implementation challenges include state-corporate collusion and data protection on global platforms. Self-Sovereign Identity (SSI) offers a solution by giving individuals full control over their data, reducing the risk of leaks, and facilitating data deletion. By understanding the Personal Data Protection Act and implementing innovative solutions such as SSI, Perum PERURI can build a robust data protection system, maintain public trust, and comply with applicable regulations.
Jibril then explained that privacy is a fundamental right inherent to every individual, as guaranteed by the 1945 Constitution of the Republic of Indonesia. Personal data is part of one’s private property and must be protected from misuse. However, the boundaries of privacy are not absolute, as seen in the case of Victoria Park Racing v. Taylor.
The PDP Act aims to protect individuals’ rights regarding the processing of personal data. However, issues remain regarding the definition of privacy and liability for data breaches. In the context of Perum PERURI, the disclosure of employees’ personal data may be subject to legal action if it violates a Non-Disclosure Agreement. The PDP Act is essential for protecting personal data, but its implementation must take into account the limits of privacy and the responsibilities of all parties. A balance is needed between individual rights and organizational interests in data management.
Legal training on the PDP Act at Perum PERURI is a crucial step in addressing the digital era and the threat of cybercrime. This initiative is not merely a formality but a vital investment in fostering a data-conscious culture and minimizing the risk of legal violations. With a deep understanding of the Personal Data Protection Act, Perum PERURI employees are expected to apply data protection principles across all operational areas, safeguard information security, and respect individual privacy rights.
The success of this training depends on the ongoing commitment of all company stakeholders. Perum PERURI needs to continue developing internal policies aligned with the PDP Act, conduct regular training, and adapt to technological and regulatory developments. In this way, Perum PERURI can serve as a model for other organizations in data governance that is sound, accountable, and focused on the protection of human rights.
Author: Debby Citra Dewi (MIH Jakarta Staff)
