-
- |
-
Revising the PDP Law and Discussing the Cybersecurity Bill Are Top of the Government's Agenda, According to Expert Analysis.
Revising the PDP Law and Discussing the Cybersecurity Bill Are Top of the Government's Agenda, According to Expert Analysis.
Digital security expert, Pratama, emphasized that efforts to strengthen national cyber defense capacity require two main legal instruments: the Cyber and Resilience Bill (RUU KKS) and the Personal Data Protection Law (UU PDP). The biggest challenge currently is determining the right implementation priorities to avoid regulatory confusion.
Urgency of the KKS Bill and the Need for Maturation
Pratama stated that the KKS Bill is highly urgent due to real incidents, such as the ransomware attack in 2024 that crippled government data centers and public services (like immigration and airports). This incident exposed the weakness of national preparedness, thus the KKS Bill must mandate incident reporting and strengthen cross-agency coordination.
To be effective, the KKS Bill must be matured through public testing and harmonized with existing regulations to avoid regulatory overlap or violation of civil rights.
Problems with UU PDP Implementation
Although the PDP Law has been ratified and is important for protecting citizens' rights from data breaches, its implementation is still hindered and not fully operational. The main obstacles are the failure to establish the PDP Agency (Badan PDP) and the unfinished status of the Government Regulations (PP) as derivative rules.
According to Pratama, the idea of revising the PDP Law now, before the law is truly implemented, would be counterproductive and risks obscuring the focus of its enforcement.
Recommended Priorities
Field facts indicate that the main priorities should be:
- Maturing the KKS Bill so that it is effectively ready to face cyber threats.
- Accelerating the formation of the PDP Agency and finalizing the derivative regulations (PP) of the PDP Law, so that citizens' rights are truly protected.
Both of these regulations, the RUU KKS and the UU PDP, must be synchronized—especially in the mechanisms for incident reporting and data breach notification—so that the country's cyber defense becomes more resilient without sacrificing the citizens' right to privacy.
Popular article
Need Any Technology Solution
Let’s Work Together on Project
