Application of Article 20 of Law Number 27 of 2022 concerning Protection of Personal Data in Company E-Commerce As a Personal Data Controller in Processing Personal Data (Case Study at PT. Bukalapak.com Tbk)

Tio Reza Aditya Cholid
Afifah Kusumadara
Patricia Audrey

Asian Journal of Management, Entrepreneurship and Social Science
Vol. 4 No. 04 (2024): Upcoming issues, Asian Journal of Management Entrepreneurship and Social Scien

Protection of individual personal data has become part of the state's constitutional obligations which have been regulated in Article 28G paragraph (1) of the 1945 Constitution of the Republic of Indonesia, and the Republic of Indonesia has made efforts by passing Law number 27 of 2022 concerning Personal Data Protection . Provisions regarding the mechanism and technicalities of positive consent are not yet clearly regulated in the Personal Data Protection Law, but this has been regulated in the General Data Protection Regulation (GDPR) which applies in Europe, which is the reference for the Indonesian Government in drafting the Personal Data Protection Law. The obstacle faced by Bukalapak in implementing article 20 is because there are no technical instructions issued by the government, either in the form of statutory regulations or through training or seminars.