Article Sidebar

Submitted
October 24, 2025
Accepted
February 18, 2026
Published
February 20, 2026
Download
pdf
Statistic
Read Counter : 14 Download : 20

Main Article Content

Abstract

With the increase in digital technologies adoption, governments are expected to balance the dual objectives of securing national interests and upholding citizens' rights to personal data protection. In Indonesia, data governance has traditionally followed a state-centric model, as portrayed in the Electronic Information and Transactions (EIT) Law in 2008. However, a notable shift occurred in 2022 with the enactment of the Personal Data Protection Law, signalling Indonesia’s transition toward a more people-centric approach to data governance. It raises a question, why Indonesia changes its perspective from state centric to people centric approach in data governance? The author argues that OECD has taken a big role in this changing perspective. This research aims to examine the influence of OECD as a multilateral organization by great powers in shaping perspectives on data governance in Indonesia. Norm localization theory by Acharya (2009) suggests that success in this localization process depends on credible local actors and institutional compatibility. In Indonesia’s case, Airlangga Hartarto and the Coordinating Ministry for Economic Affairs fulfilled that role, negotiating national legitimacy and local constraints while translating the OECD’s liberal and open data governance agenda into tangible legal reform. Also, Indonesia’s Presidency in G20 as well as data breach and cyber-incident during IMEI registration procedure since 2020 help accelerate the issuance of Personal Data Protection Law. By combining OECD normative influence with a domestic elite predisposed to liberalization, the adoption of the Personal Data Protection Law is more than mere policy transfer. It represents norm localization, where imported norms are reinterpreted, adapted, and entrenched into Indonesia's legal system.

Keywords

Indonesia OECD Norm Localization Personal Data Protection G20 IMEI Data Breach

Article Details

References

  1. Acharya, A. (2004). How Ideas Spread: Whose Norms Matter? Norm Localization and Institutional Change in Asian Regionalism. International Organization, Vol. 58, No. 2 (Spring, 2004), pp. 239-275. Stable URL: http://www.jstor.org/stable/3877858.
  2. Acharya, A. (2009). Whose Ideas Matter?: Agency and Power in Asian Regionalism. Ithaca, NY: Cornell University Press, 2009.
  3. Bisnis Tekno (2022). Memberantas Tipu-Tipu Jasa Unlock IMEI Palsu. Accessed on 21h July 2025 through https://teknologi.bisnis.com/read/20221212/280/1607666/memberantas-tipu-tipu-jasa-unlock-imei-palsu.
  4. Cheryl, B.-K.; Ng, B.-K.(2022). Protecting the Unprotected Consumer Data in Internet of Things: Current Scenario of Data Governance in Malaysia. Sustainability 2022, 14, 9893. https://doi.org/10.3390/ su14169893.
  5. Chundu, B., et.al. (2025). Cyber-security governance framework pillars for Zimbabwean local authorities, Cogent Social Sciences, 11:1, 2453094, DOI: 10.1080/23311886.2025.2453094.
  6. Collier, D. (2011). Understanding Process Tracing. PS: Political Science and Politics, 44(4), 823–830. http://www.jstor.org/stable/41319974.
  7. Coordinating Ministry for Economic Affairs of the Republic of Indonesia. (2022). Indonesia's G20 Presidency Focused on Strengthening the Multilateralism System and Effective Global Partnerships to Ensure “No One Left Behind”. Press Release number HM.4.6/72/SET.M.EKON.3/2/2022 Jakarta, February 17th, 2022.
  8. Coordinating Ministry for Economic Affairs of the Republic of Indonesia. (2022). Coordinating Minister Airlangga: Indonesia, together with the world's big countries, are looking for a way out of the multiple disruptions that plague the world. Press Release number HM.4.6/166/SET.M.EKON.3/3/2022 in Jakarta, March 28th, 2022.
  9. Coordinating Ministry for Economic Affairs of the Republic of Indonesia. (2023).Launch of the White Paper on Indonesia's National Digital Economy Development Strategy 2030, Government Prepares 3 Phases of National Digital Transformation. Press Release in Jakarta, December 6, 2023.
  10. Coordinating Ministry for Economic Affairs. (2023). White Paper on the National Strategy for the Development of Indonesia’s Digital Economy 2030.
  11. Department for Digital Transformation of Italy. (2021). Italian G20 Presidency: First Digital Economy Task Force Meeting at 10 February 2021. Accessed through https://innovazione.gov.it/notizie/articoli/en/italian-g20-presidency-first-digital-economy-task-force-meeting/ at 15th October 2025.
  12. European Union. 2000. Charter of Fundamental Rights of the European Union (2000/C 364/01).
  13. Government of the Netherlands,n.d. Forms of Cybercrime. Access on 21th July through https://www.government.nl/topics/cybercrime/forms-of-cybercrime.
  14. Hamid, Supardi et.al. (2025) Mapping the landscape of government data breaches: A bibliometric analysis of literature from 2006 to 2023. Social Sciences & Humanities Open 11 (2025) 101234
  15. Haq, Mahbub ul. (1992). Human development in a changing world. Human Development Report Office Series Occasional Papers. New York : UNDP.
  16. Herbst, Lena and Jakobi, Anja P. (2024). Opening up or closing down? Non-state actors in UN cybersecurity governance. Journal of Global Security Studies, 9(3), 2024, ogae026. https://doi.org/10.1093/jogss/ogae026
  17. Hossaina, et.al. (2025). Cybersecurity in local governments: A systematic review and framework of key challenges. Urban Governance 5
  18. Indonesian Customs (2025). Customs Declaration (BC 2.2). Accessed on 21h July 2025 through https://ecd.beacukai.go.id/
  19. Indonesian Customs. (2022). Bea Cukai Edukasi Masyarakat Ketentuan IMEI Melalui Mal dan Talkshow. Accessed on 21h July 2025 through https://www.beacukai.go.id/berita/bea-cukai-edukasi-masyarakat-ketentuan-imei-melalui-mal-dan-talkshow.html.
  20. Kompas Tekno, (2023). IDC: Smartphone Bekas dan Refurbished Makin Diminati. Accessed on 14th July 2025 through https://tekno.kompas.com/read/2023/01/12/12300087/idc--smartphone-bekas-dan-refurbished-makin-diminati#google_vignette
  21. Kompas.id (2023).Polri Amankan Enam Tersangka Pendaftar Nomor IMEI Ilegal pada Kementerian Perindustrian. Accessed on 17th July 2025 through https://www.kompas.id/artikel/bareskrim-polri-ungkap-pendaftaran-nomor-imei-ilegal-pada-kemenperin.
  22. Ministry of Communication and Information Technology (2025a). Perlindungan Data Pribadi Frequently Asked Questions. Accessed on 21st July 2025 through https://pdp.id/faq
  23. Ministry of Communication and Information Technology (2025b). Rancangan Peraturan Pemerintah Tentang Peraturan Pelaksanaan Undang-Undang Nomor 27 Tahun 2022 Tentang Pelindungan Data Pribadi. Accesed on 21st July 2025 through https://pdp.id/rpp-ppdp/1?name=Rancangan%20Peraturan%20Pemerintah%20Tentang%20Peraturan%20Pelaksanaan%20Undang-Undang%20Nomor%2027%20Tahun%202022%20%20Tentang%20Pelindungan%20Data%20Pribadi
  24. Ministry of Communication and Information Technology. (2015). Kemkominfo Tengah Siapkan Aturan Registrasi IMEI Ponsel. Accessed on 14th July 2025 through https://www.komdigi.go.id/berita/berita-komdigi/detail/kemkominfo-tengah-siapkan-aturan-registrasi-imei-ponsel.
  25. Ministry of Communication and Information Technology. (2018). Lindungi Hak Pengguna Ponsel, Kominfo Sosialisasikan Rencana Pengendalian IMEI. Accessed on 14th July 2025 through https://www.komdigi.go.id/berita/berita-komdigi/detail/lindungi-hak-pengguna-ponsel-kominfo-sosialisasikan-rencana-pengendalian-imei.
  26. Ministry of Communication and Information Technology. (2019). Lindungi Industri dan Konsumen, Pemerintah Kontrol IMEI Ponsel. Accessed on 14th July 2025 through https://www.komdigi.go.id/berita/berita-komdigi/detail/lindungi-industri-dan-konsumen-pemerintah-kontrol-imei-ponsel.
  27. Ministry of Communication and Information Technology. (2008). Law of the Republic of Indonesia Number 11 of 2008 concerning Electronic Information and Transactions
  28. Ministry of Communication and Information Technology. (2022). Law of the Republic of Indonesia Number 27 of 2022 concerning Personal Data Protection
  29. Ministry of Finance of the Republic of Indonesia. (2022). OECD-Indonesia Joint Work Programme 2022-2025 - Fostering A Resilient, Sustainable And Inclusive Recovery . 14 Juli 2022.
  30. Ministry of State Secretariat for the Republic of Indonesia. (2020). Government Implements IMEI Control for Telecommunication Devices Based on CEIR, September 16, 2020. Accessed through https://setkab.go.id/pemerintah-terapkan-pengendalian-imei-perangkat-telekomunikasi-berbasis-ceir/ at 15th October 2025.
  31. OECD. (2020). Going Digital Integrated Policy Framework. OECD Digital Economy Papers. February 2020 No. 292.
  32. OECD. (2022). Going Digital Guide to Data Governance Policy Making.
  33. OECD. (2022a). Meeting of the Council at Ministerial Level, 9-10 June 2022. The Secretary-General's Report to Ministers on the Implementation of the OECD Global Relations Strategy
  34. OECD. (2024). Roadmap For The OECD Accession Process of Indonesia (Adopted By The Council By Written Procedure on 29 March 2024.
  35. Partai Golkar, n.d. Airlangga Hartato’s Profile. Accessed through https://www.partaigolkar.com/airlangga-hartarto/ at 15th October 2025.
  36. Radoniewicz, Filip. (2025). Cybercrime and the Law An Analysis of Legal Governance in Europe.
  37. Rauch, S. (2023). Process Tracing. In F. Badache, L. R. Kimber, & L. Maertens (Eds.), International Organizations and Research Methods: An Introduction (pp. 308–314). University of Michigan Press. http://www.jstor.org/stable/10.3998/mpub.11685289.63.
  38. European Union, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the Protection of Natural Persons with Regard to The Processing of Personal Data and on the Free Movement of Such Data, And Repealing Directive 95/46/EC (General Data Protection Regulation)
  39. Tempo. (2023). Membidik Tersangka Baru Kasus IMEI Ilegal. Accessed on 14th July 2025 through https://www.tempo.co/politik/membidik-tersangka-baru-imei-ilegal-822280.
  40. Tempo, (2025). Bea Cukai Batam Tangkap Joki IMEI di Dua Pelabuhan, 42 iPhone Disita. Accessed on 21h July 2025 through https://www.tempo.co/digital/bea-cukai-batam-tangkap-joki-imei-di-dua-pelabuhan-42-iphone-disita-1203674#goog_rewarded.
  41. Tridgell, Jennifer. (2025).Open or closing doors? The influence of ‘digital sovereignty’ in the EU’s Cybersecurity Strategy on cybersecurity of open-source software. Computer Law & Security Review 56 (2025) 106078
  42. United Nations on Drugs and Crime. (2025). United Nations Convention against Cybercrime. Accesed on 22th July through https://www.unodc.org/unodc/en/cybercrime/convention/home.html#:~:text=Strengthening%20International%20Cooperation%20for%20Combating,the%20six%20official%20languages%20below.