<![CDATA[The rapid advancement of digital technologies has substantially increased cross-border exchanges of personal data, while Indonesia’s regulatory and supervisory mechanisms for such transmissions remain underdeveloped despite the enactment of Law No. 27 of 2022 on Personal Data Protection. Institutional and procedural gaps create risks of data breaches, misuse, and inadequate protection of data subjects in the international context. This study aims to (1) assess the urgency of establishing a dedicated supervisory authority for cross-border personal data transfers and (2) propose an ideal institutional design compatible with Indonesia’s legal framework. The research employs a normative legal method combined with a statutory approach, historical-comparative study of selected jurisdictions (e.g., EU, Singapore, Brazil), and policy analysis to evaluate regulatory implications and institutional options. Primary legal texts, policy documents, academic literature, and comparative materials are qualitatively analyzed to identify regulatory gaps and formulate institutional recommendations. The findings indicate the necessity of an independent data protection authority with a specialized cross-border transfers unit, investigative and corrective powers, adequacy assessment procedures, and mandatory technical security standards (e.g., encryption, pseudonymization) prior to transfer.]]>
Copyrights © 2026
