The Transfer Data Pribadi Lintas Negara dalam Ekonomi Digital: Analisis Harmonisasi Undang-undang Pelindungan Data Pribadi Indonesia dengan Kerangka Hukum Asean

Abstract

The growth of Southeast Asia’s digital economy has increased cross-border personal data transfers, highlighting the need for regulatory harmonisation between Indonesia and ASEAN. This study aims to analyse personal data transfer provisions under Law Number 27 of 2022 on Personal Data Protection (PDP Law) and their alignment with the ASEAN Framework on Personal Data Protection (2016), ASEAN Data Management Framework, and ASEAN Model Contractual Clauses (2021). Employing normative juridical research, this study adopts statutory, conceptual, and comparative approaches. The findings indicate that Articles 55 and 56 of the PDP Law establish legal grounds for cross-border data transfers through adequacy assessments, international agreements, binding contracts, and data subject consent. Constitutional Court Decision Number 137/PUU-XXIII/2025 strengthens the principle of data controller accountability as a constitutional foundation for cross-border transfers. However, the absence of implementing regulations and institutional mechanisms hinders effective implementation. ASEAN frameworks demonstrate alignment in accountability principles and contractual mechanisms but remain constrained by their non-binding, soft-law nature. Therefore, harmonisation should be strengthened through implementing regulations, adoption of ASEAN Model Contractual Clauses, institutional capacity building, and Indonesia’s active participation in DEFA.