The Future of Arbitration for Personal Data Disputes in Indonesia: Weighing the Benefits and Challenges
Downloads
Law No. 27 of 2022 on Personal Data Protection (“PDP Law”) states that any personal data protection dispute can be settled through court, arbitration or any other form of alternative dispute resolution. Due to the recent issuance of the PDP Law, dispute resolution in the field of personal data is still a new area in Indonesia, especially arbitration. This paper seeks to discover the possibility of implementing arbitration for personal data breach disputes in Indonesia, by examining the benefits and challenges in place. Conducted using a normative legal research method, this research shows that arbitration offers many benefits which suit the specific features of data disputes, however, may face many challenges in the implementation. Flexibility, time and cost efficiency, confidentiality, expertise, and also the ability to cater cross border cases, are its benefits. However, there are some challenges in the implementation, for instance, the mass number of claimants, absence of implementing regulations and precedents, cost and procedural barriers for individual data subjects. To resolve these practical issues, the government can establish a specific sectoral arbitration board, which specifically resolves personal data-related disputes and has procedures tailored to meet the specific needs of data disputes. Hence, a more streamlined, less costly and accessible dispute resolution can be established.
American Bar Association, “Alternative Dispute Resolution.” (1995) The Compleat Lawyer 12 (2). <http://www.jstor.org/stable/23778837> accessed 14 June 2024.
Azzi A, ‘The Challenges Faced by the Extraterritorial Scope of the General Data Protection Regulation’ (2018) 128 (2) Journal of Intellectual Property, Information Technology and E-Commerce Law <https://www.jipitec.eu/archive/issues/jipitec-9-2-2018/4723> accessed 7 June 2024.
Birch K and others, ‘Data as asset? The measurement, governance, and valuation of digital personal data by Big Tech’ (2021) 1(15) Big Data and Society <https://journals.sagepub.com/doi/pdf/10.1177/20539517211017308> accessed 7 June 2024.
Chaisse J and Garg I, ‘Redefining Resolution in Data Disputes: Why Arbitration Holds the Key’ (2023) Kluwer Arbitration Blog https://arbitrationblog.kluwerarbitration.com/2023/12/11/redefining-resolution-in-data-disputes-why-arbitration-holds-the-key/> accessed 20 June 2024.
Cheng L and others, ‘Enterprise Data Breach: Causes, Challenges, Preventions and Future Directions’ (2017) 7(5) WIREs Data Mining and Knowledge Discovery <https://wires.onlinelibrary.wiley.com/doi/10.1002/widm.1211> accessed 20 June 2024.
CNBC Indonesia Editorial, ‘Cerita Lengkap Bocornya 91 Juta Data Akun Tokopedia’, (CNBC Indonesia, 4 May 2023) <https://www.cnbcindonesia.com/tech/20200504063854-37-155936/cerita-lengkap-bocornya-91-juta-data-akun-tokopedia> accessed 18 June 2024.
Commercial Dispute (Reviewed from the Strengths of ADR and Decision of Arbitration)’, (2019) 6(1) Brawijaya Law Journal of Legal Studies <https://lawjournal.ub.ac.id/index.php/law/article/view/182/pdf> accessed 14 June 2024.
Dewi I R, ‘Hacker Bjorka is Back, Data Apa Saja yang Pernah Dibocorkan?’, (CNBC Indonesia, 11 November 2022) <https://www.cnbcindonesia.com/tech/20221111075351-37-386931/hacker-bjorka-is-back-data-apa-saja-yang-pernah-dibocorkan> accessed 12 June 2024.
Draft of Government Regulation on the Implementing Regulation of Law Number 27 of 2022 on Personal Data Protection as released by the Ministry of Communication and Information, <https://pdp.id/rpp-ppdp/1> accessed 16 June 2024.
Gojek, Terms and Conditions on the Use of Gojek Application (17 February 2024) <https://www.gojek.com/id-id/terms-and-condition/gojek> accessed 20 June 2024.
Gould N, ‘Adjudication and ADR: An Overview”, <https://www.fenwickelliott.com/research-insight/articles-papers/adjudication-and-adr-overview> accessed 14 June 2024.
Grab Terms of Service and Policies (12 June 2024) <https://www.grab.com/id/en/terms-policies/transport-delivery-logistics/> accessed 20 June 2024.
Hayward B, ‘Too Much of a Good Thing? The Case for Less Flexibility in International Commercial Arbitration’ Monash University (19 December 2017) <https://impact.monash.edu/legal/too-much-of-a-good-thing-the-case-for-less-flexibility-in-international-commercial-arbitration/> accessed 21 June 2024.
Indonesia National Arbitration Board Regulation 2022. https://baniarbitration.org/arbitration-rules.
Information Commissioner’s Office, ‘Personal Data Breaches: A Guide’ <https://ico.org.uk/for-organisations/report-a-breach/personal-data-breach/personal-data-breaches-a-guide/#whatisa> accessed 27 June 2024.
Law Number 27 of 2022 on Personal Data Protection (The Republic of Indonesia State Gazette Year 2022 Number 196)
Law Number 30 of 1999 on Arbitration and Alternative Dispute Settlements (The Republic of Indonesia State Gazette Year 1999 Number 138)
L’Heureux N, ‘Effective consumer access to justice: Class actions’, (1992) 15 Journal of Consumer Policy < https://doi.org/10.1007/BF01014122> accessed 12 June 2024.
Marshall P D, ‘A Comparative Analysis to the Right to Appeal”’ (2011) 22 Duke Journal of Comparative and International Law <https://scholarship.law.duke.edu/djcil/vol22/iss1/1/> accessed 10 June 2024.
Naik N V, ‘Confidentiality in International Commercial Arbitration: A Reality or Presumption’ <https://papers.ssrn.com/sol3/papers.cfm?abstract_id=4720700> (2023) accessed 21 June 2024.
Ong R, ‘Mandatory Data Breach Notification: Its Role in Protecting Personal Data’ (2023) 10:1 Journal of International and Comparative Law <https://papers.ssrn.com/sol3/papers.cfm?abstract_id=4480675> accessed 10 June 2024.
Onycma E, ‘Selection of Arbitrators in International Commercial Arbitration’ <https://eprints.soas.ac.uk/4424/1/Selection_of_arbitrators.pdf> accessed 28 June 2024.
Rodrigues G A P and others, ‘Understanding Data Breach from a Global Perspective:Visualization and Data Protection Law Review’ (2023) 9(27) Data <https://www.mdpi.com/2306-5729/9/2/27> accessed 15 June 2024.
Shard Secure, ‘What Are the Most Common GDPR Violations? A Guide’ (17 August 2023) <https://shardsecure.com/blog/most-common-gdpr-violations> accessed 22 June 2024.
Shopee, Terms and Conditions (30 May 2024) <https://help.shopee.co.id/portal/4/article/71187> accessed 20 June 2024.
Suherman, ‘Arbitration and Other Alternative Dispute Resolution for Commercial Dispute (Reviewed from the Strengths of ADR and Decision of Arbitration)’, (2019) 6(1) Brawijaya Law Journal of Legal Studies <https://lawjournal.ub.ac.id/index.php/law/article/view/182/pdf>
Sumirat J R, ‘Data Breach in Indonesia: A Contemporary View’ (2023) 3(5) Innovative: Journal of Social Science Research <https://j-innovative.org/index.php/Innovative/article/view/6744/5022> accessed 6 June 2024.
The Supreme Court of the Republic of Indonesia Regulation Number 1 of 2002 on Class Action Procedure.
Thomson Reuters, Arbitration vs. Litigation: The Differences (4 October 2022) <https://legal.thomsonreuters.com/blog/arbitration-vs-litigation-the-differences/> accessed 21 June 2024.
Tokopedia, Terms and Conditions (25 June 2024) <https://www.tokopedia.com/terms?lang=id> accessed 20 June 2024.
Uniform Domain-Name Dispute-Resolution Policy <https://www.icann.org/resources/pages/help/dndr/udrp-en> accessed 29 June 2024.
Wall, J A and others, “Mediation: A Current Review and Theory Development.” (2001) 45(3) The Journal of Conflict Resolution <http://www.jstor.org/stable/3176150> accessed 29 June 2024.
Werra J, ‘Using Arbitration and ADR for Disputes about Personal and Non-Personal Data: What Lessons from Recent Developments in Europe?’, (2020) 30 (2) The American Review of International Arbitration <https://aria.law.columbia.edu/issues/30-2/using-arbitration-and-adr-for-disputes-about-personal-and-non-personal-data-what-lessons-from-recent-developments-in-europe-vol-30-no-2/ > accessed 21 June 2024.
Copyright (c) 2025 Aussielia Amzulian

This work is licensed under a Creative Commons Attribution 4.0 International License.