Education on Personal Data Protection in the Era of Digital Transformation among Indonesian and Thai Societies

Figure Ilustration AI

FORMOSA NEWS - Semarang - Public Education Crucial to Personal Data Protection in Indonesia and Thailand, Study Shows. A comparative legal study published in 2026 examines how Indonesia and Thailand incorporate personal data protection education into their legal systems to combat digital security risks. The research was conducted by Siti Mutmainah, Hani Irhamdessetya, Vincentius Simon Suyanto, and Hargianti Dini Iswandari from Universitas Ngudi Waluyo in Semarang, Indonesia, alongside Nico Irawan from Thai Global Business Administration Technological College in Thailand. The findings demonstrate that while both Southeast Asian nations have established comprehensive data privacy laws, public education remains an essential preventive mechanism to help citizens understand their privacy rights and reduce vulnerabilities like data breaches and identity theft.

Background and Regional Relevance

Digital transformation has drastically increased internet participation across Southeast Asia. By early 2024, Indonesia recorded 185.3 million internet users, while Thailand reached 63.21 million users. Rapid digital adoption exposes individuals to systemic online risks, including financial fraud, unauthorized data profiling, and privacy breaches. While both nations enacted landmark privacy legislation—Thailand’s Personal Data Protection Act in 2019 and Indonesia’s Law Number 27 on Personal Data Protection in 2022—statutory prohibitions alone do not stop digital exploitation. Public legal literacy bridges written laws and real-world compliance, transforming individuals from passive digital users into informed legal subjects capable of asserting their rights.

Research Methodology
The authors used a normative legal research methodology based on qualitative juridical analysis. The study applied three core analytical frameworks:

• Statutory Approach: Direct examination of national legislation, including Indonesia's Law Number 27 of 2022 and Thailand's Personal Data Protection Act, BE 2562 (2019).
  
• Conceptual Approach: Theoretical analysis of right-to-privacy concepts, public participation models, and digital legal literacy.
  
• Comparative Approach: Systematic mapping of structural similarities, operational differences, and institutional responsibilities between Indonesia and Thailand.
  

Data collection relied on primary statutory documents, constitutional texts, and secondary academic literature published between 2020 and 2024.

Key Research Findings
The study identifies contrasting operational models for digital literacy in both legal frameworks:

• Indonesia’s Participatory Model: Article 63 of Law Number 27 of 2022 explicitly frames personal data protection education as a matter of public participation. It includes socialization, advocacy, training, and public supervision, giving civil society an active role in enforcing privacy standards.
  
• Thailand’s Institutional Model: Sections 16 and 44 of the Personal Data Protection Act assign structured educational mandates directly to state bodies, specifically the Personal Data Protection Committee and its administrative office. These authorities are tasked with delivering knowledge services and training programs for data controllers, processors, and the general public.
  
• The Literacy Gap: Data subject rights—such as accessing, correcting, or deleting personal data and withdrawing consent—remain passive unless supported by proactive public literacy campaigns.
  
• Preventive Function: Legal education serves as a preventive instrument that mitigates harm prior to data misuse, whereas traditional legal sanctions act retrospectively after harm has occurred.
  

Real-World Impact and Industry Implications
The research underscores that statutory sanctions are insufficient to secure digital ecosystems without continuous public education. Enhancing digital legal literacy benefits multiple sectors:

• Policymakers & Regulators: Offers a roadmap to operationalize statutory mandates into structured national educational campaigns.
  
• Digital Economy & Businesses: Increases consumer trust in e-commerce, cloud platforms, and financial technology services by fostering informed consent practices.
  
• Educational Institutions: Provides a framework to integrate digital rights, privacy notice analysis, and identity protection into school and university curricula.
  

Author Profiles
Siti Mutmainah, LL.M. – Lecturer and researcher at Universitas Ngudi Waluyo, Semarang, Indonesia, specializing in personal data protection, public legal education, and comparative legal studies.
Hani Irhamdessetya, M.H. – Legal scholar at Universitas Ngudi Waluyo, Semarang, Indonesia, specializing in digital law, electronic transaction governance, and consumer rights.
Vincentius Simon Suyanto, M.H. – Faculty member at Universitas Ngudi Waluyo, Semarang, Indonesia, focusing on normative legal analysis and civil law rights.
Hargianti Dini Iswandari, M.H. – Senior legal researcher at Universitas Ngudi Waluyo, Semarang, Indonesia, specializing in legal literacy, human rights, and public governance.
Nico Irawan, Ph.D. – Educational researcher and academic administrator at Thai Global Business Administration Technological College, Thailand, specializing in international education models, institutional development, and digital literacy strategy.

Source Information
Siti Mutmainah, Hani Irhamdessetya, Vincentius Simon Suyanto, Hargianti Dini Iswandari, Nico Irawan. Education on Personal Data Protection in the Era of Digital Transformation among Indonesian and Thai Societies. Jurnal Internasional Analisis Hukum (IJLA). Vol. 4, No. 3, hlm. 439-458
DOI: https://doi.org/10.59890/ijla.v4i3.284
URL: https://journal.multitechpublisher.com/index.php/ijla/index