<![CDATA[Alia Rif’at Sukmawati Ramadhan, Moch. Zairul Alam, Diah Pawestri Maharani Fakultas Hukum Universitas Brawijaya Jl. MT. Haryono No. 169 Malang e-mail: aliaramadhan@gmail.com Abstrak Pengenaan ganti rugi kepada Subjek Data Pribadi akibat kegagalan pelindungan data pribadi oleh Pengendali Data Pribadi di Indonesia masih menjadi masalah karena terdapat ketidaklengkapan hukum pada Pasal 12 Undang-Undang Pelindungan Data Pribadi. Ini berakibat pada ketidakpastian aspek penegakan hukum dalam hal pengenaan ganti rugi ketika terjadi kegagalan perlindungan data pribadi. Hingga saat ini, Pelindungan Data Pribadi belum mengatur secara spesifik mengenai pengenaan ganti rugi akibat kegagalan pelindungan data pribadi. Berdasarkan permasalahan tersebut, skripsi ini mengangkat permasalahan (1) Bagaimana analisis pengaturan pengenaan ganti kerugian kepada subjek data pribadi akibat kegagalan pelindungan data pribadi oleh pengendali data pribadi dalam ketentuan Indonesia? (2) Bagaimana pengaturan yang ideal mengenai pengenaan ganti kerugian kepada subjek data pribadi akibat kegagalan pelindungan data pribadi oleh pengendali data pribadi melalui perbandingan ketentuan Indonesia dengan Uni Eropa dan Inggris? Jenis penelitiannya adalah yuridis normatif dengan metode pendekatan pendekatan perundang-undangan (statute approach), pendekatan konseptual (conceptual approach), dan pendekatan perbandingan (comparative approach). Bahan hukum primer, tersier, dan sekunder akan dianalisis oleh penulis menggunakan metode interpretasi sistematis dan interpretasi komparatif. Berdasarkan hasil analisis penulis, pengaturan mengenai ganti kerugian telah diatur pada Pasal 12 UU Pelindungan Data Pribadi, hanya saja belum diatur secara spesifik sehingga menimbulkan kelemahan penegakan hukum. Sehingga, hasil dari studi komparasi dengan General Data Protection di Uni Eropa, French Data Protection Act, German Federal Data Protection Act, dan Data Protection Act 2018 menunjukkan bahwa Indonesia perlu mengatur bentuk kerugian dan batasannya serta prosedur ganti rugi akibat kegagalan data pribadi yang bisa ditransplantasikan di Indonesia. Kata Kunci: ganti rugi, kegagalan, data pribadi Abstract Compensation paid to personal data subjects due to the failure to protect personal data by personal data controllers in Indonesia has been an issue resulting from the incompleteness of law in Article 12 of Law Concerning Personal Data Protection. This problem has led to uncertainty in law enforcement in the context of compensation following the failure to protect personal data. To date, personal data protection does not specifically govern compensation paid due to the failure concerned. Departing from this issue, this research aims to study (1) the analysis of the regulation of compensation paid to personal data subjects following the failure to protect personal data by personal data controllers under the legal provisions in Indonesia, (2) ideal regulation regarding compensation paid to personal data subjects following the failure to protect personal data by personal data controllers seen from the perspective of the comparison of the legal provisions in Indonesia and European Union and England. This research employed normative-juridical methods and statutory, conceptual, and comparative approaches. Primary, secondary, and tertiary data were analyzed based on systematic and comparative interpretations. The research results reveal that the compensation is regulated in Article 12 of the Law concerning Personal Data Protection but not specifically, thereby rendering the regulation weak. Therefore, this comparative study of General Data Protection in the European Union, French Data Protection Act, German Federal Data Protection Act, and Data Protection Act 2018 shows that Indonesia needs to regulate the type of loss and its limit and how the compensation due to the failure of personal data may be transplanted in Indonesia. Keywords: compensation, failure, personal data]]>
