Cross-Border Personal Data Transfer Requirements under Indonesia’s Personal Data Protection Law: Normative Clarity and Legal Protection

Authors

  • Diana Puji Ratna Kusuma Fitri State University of Surabaya
  • Hananto Widodo State University of Surabaya
  • Budi Hermono State University of Surabaya

DOI:

https://doi.org/10.38035/jlph.v6i5.3528

Keywords:

cross-border personal data transfer, Article 56 personal data protection, legal certainty, legal protection

Abstract

This article examines the normative construction of Article 56 of Law Number 27 of 2022 on Personal Data Protection, which regulates the requirements for cross-border personal data transfers. The study is motivated by the increasing transfer of personal data within the digital ecosystem, which may weaken the protection of data subjects’ rights if it is not supported by clear legal norms. This study aims to analyze the normative construction of Article 56 and the implications of its normative ambiguity for legal certainty and the legal protection of data subjects. This study employs a normative legal research method using statutory, conceptual, and limited comparative approaches. The findings show that Article 56 establishes three requirements for cross-border personal data transfers, namely an equivalent or higher level of protection, adequate and binding protection, and the consent of the data subject as a last resort. However, this provision does not yet provide clear normative parameters regarding the standard of equivalent protection, the form of adequate and binding safeguards, or the limits on the use of consent. Therefore, Article 56 needs to be clarified in order to provide legal certainty and ensure the protection of data subjects’ rights in cross-border personal data transfers.

References

Alfitri, N. A., Rahmawati, & Firmansyah. (2024). Perlindungan Terhadap Data Pribadi di Era Digital Berdasarkan Undang-Undang Nomor 27 Tahun 2022. Journal Social Society, 4(2), 92–111. https://doi.org/https://doi.org/10.54065/jss.4.2.2024.511

Anjawai, N. B., Amboro, F. Y. P., & Hutauruk, R. H. (2022). Perbandingan Perlindungan Hukum Terkait Data Pribadi di Indonesia dan Jerman. AL-MANHAJ: Jurnal Hukum dan Pranata Sosial Islam, 4(2), 207–218. https://doi.org/10.37680/almanhaj.v4i2.1791

Aulia, E. (2024). Analisis Pasal 56 dalam Undang-Undang Nomor 27 Tahun 2022 tentang Pelindungan Data Pribadi. Review Unes, 7(1), 225–240. https://review-unes.com/index.php/law/article/download/2267/1861/

Ayiliani, F. M., & Farida, E. (2024). Urgensi Pembentukan Lembaga Pengawas Data Pribadi sebagai UpayaPelindungan Hukum terhadap Transfer Data Pribadi Lintas Negara. Jurnal Pembangunan Hukum Indonesia, 6, 431–455.

Charles, M., & Oktawijaya, N. (2026). Quo Vadis Urgensi Pembentukan Otoritas Independen atas Kesepakatan Transfer Data Pribadi Warga Indonesia ke Amerika Serikat. Beleid: Journal of Administrative Law and Public Policy, 4(1), 140–154.

Fitriana, S. A., & Nur, H. (2026). Analisis Yuridis Normatif Perlindungan Data Pribadi Di Indonesia Berdasarkan Undang-Undang Nomor 27 Tahun 2022 Tentang Perlindungan Data Pribadi. Jurnal Hukum dan Kewarganegaraan, 16(7), 2041–2050. https://doi.org/https://doi.org/10.6679/rw94sy93

Gregory, V. W. (2022). Cross-Border Data Flows, the GDPR, and Data Governance. International Organisations Research Journal, 17(1). https://doi.org/10.17323/1996-7845-2022-01-03

Hadjon, P. M. (1987). Perlindungan Hukum Bagi Rakyat Indonesia. PT Bina Ilmu.

Hockop, S. P. (2024). Perlindungan Hukum Terhadap Data Pribadi pada Era Digital di Indonesia: Studi Undang-Undang Perlindungan Data Pribadi dan General Data Protection Regulation (GDPR). Jurnal Esensi Hukum, 6(2), 105–124.

Jiménez-Gómez, & Sofía, B. (2021). Cross-Border Data Transfers Between the Eu and the U.S.: a Transatlantic Dispute. In Santa Clara J. Int’l L. (Vol. 19, Nomor 2).

Judijanto, L., & Nugroho, B. (2025). Regulasi Keamanan Siber dan Penegakan Hukum terhadap Cybercrime di Indonesia. Sanskara Hukum Dan HAM, 3(03), 118–124. https://doi.org/https://doi.org/10.58812/shh.v3i03.544

Jurcys, P., Compagnucci, M. C., & Fenwick, M. (2022). The Future of International Data Transfers : Managing New Legal Risk with a ‘User-Held’ Data Model. The Computer Law and Security Review, 46.

Manullang, E. F. M. (2017). Legisme, Legalitas dan Kepastian Hukum (Cetakan ke). Kencana.

Maramis, J. J., Koesoemo, A. T., & Pinasang, B. (2024). Analisis Yuridis Perlindungan Data Pribadi Dalam Transaksi Pinjaman Online. Jurnal Fakultas Hukum Unsrat, 13(2), 1–11. https://ejournal.unsrat.ac.id/v3/index.php/lexprivatum/article/view/53924

Nafisa, T. A., Alam, M. Z., & Maharani, D. P. (2025). Analisis Pengaturan Pengalihan Data Pribadi Lintas Negara Akibat Akuisisi dalam Undang Undang Nomor 27 Tahun 2022 tentang Pelindungan Data Pribadi. Jurnal Dialektika Hukum, 7(1), 97–135.

Nathasya, S. N., Rosadi, S. D., & Pratama, G. G. (2023). Studi Komparasi Pelindungan Data Pribadi Warga Negara Indonesia Dalam Transfer Data Pribadi Lintas Batas (Transborder Personal Data Transfer) Antara Indonesia Dengan Jepang. 7(3), 324–335.

Prastowo, A. A., Algamar, A. F., & Siahaan, G. Y. (2026). Kepastian Hukum dalam Transfer Data Lintas Negara: Tinjauan Terhadap Undang-Undang Perlindungan Data Pribadi di Indonesia. 4(2), 97–135. https://doi.org/https://doi.org/10.61104/alz.v4i2.5760

Putra, R. K., Fahmi Idris, M., & Widhiati, G. (2024). Perlindungan Data Pribadi Dalam Era Big Data : Implikasi Hukum Di Indonesia. Jurnal Kajian Ilmu Hukum dan Politik, 2(4), 31–44. https://journal.stekom.ac.id/index.php/Jaksa

Riswandi, B. A., & Gultom, A. M. (2023). Protecting Our Mosts Valuable Personal Data: a Comparison of Transborder Data Flow Laws in the European Union, United Kingdom, and Indonesia. Prophetic Law Review, 5(2), 179–206. https://doi.org/10.20885/PLR.vol5.iss2.art3

Tarikh, A. (2025). Analisis Perbandingan Hukum Perlindungan Data Antara Indonesia Dan Uni Eropa: Tinjauan Kasus Cambridge Analytica. 2(27), 1–16.

Tjatur, H., C., D. I., Wardhana, B., & Riyanto, G. D. (2024). Pelindungan Data Pribadi Dalam Jurnalisme Dan Media. 165.

Tomasoa, G. O. (2024). Perlindungan Hukum Terhadap Kebocoran Data Pribadi Pada Platform Media Sosial. PAMALI: Pattimura Magister Law Review, 4(1), 24. https://doi.org/10.47268/pamali.v4i1.1363

Yadav, T. P., & Dhawan, A. S. (2023). Cross-Border Data Transfers: Legal Framework And Challenges. International Journal of Arts & Education Research, 12(6), 118–133.

Downloads

Published

2026-07-18

How to Cite

Fitri, D. P. R. K., Widodo, H., & Hermono, B. (2026). Cross-Border Personal Data Transfer Requirements under Indonesia’s Personal Data Protection Law: Normative Clarity and Legal Protection. Journal of Law, Politic and Humanities, 6(5), 3952–3965. https://doi.org/10.38035/jlph.v6i5.3528

Issue

Vol. 6 No. 5 (2026): (JLPH) Journal of Law, Politic and Humanities

Section

Articles

License

Copyright (c) 2026 Diana Puji Ratna Kusuma Fitri, Hananto Widodo, Budi Hermono

Creative Commons License

This work is licensed under a Creative Commons Attribution 4.0 International License.

Authors who publish their manuscripts in this journal agree to the following conditions:

  1. The copyright on each article belongs to the author(s).
  2. The author acknowledges that the Journal of Law, Poliitic and Humanities (JLPH) has the right to be the first to publish with a Creative Commons Attribution 4.0 International license (Attribution 4.0 International (CC BY 4.0).
  3. Authors can submit articles separately, arrange for the non-exclusive distribution of manuscripts that have been published in this journal into other versions (e.g., sent to the author's institutional repository, publication into books, etc.), by acknowledging that the manuscript has been published for the first time in the Journal of Law, Poliitic and Humanities (JLPH).