ANALISIS TANGGUNG JAWAB NEGARA DALAM PERLINDUNGAN DATA PRIBADI BERDASARKAN UNDANG-UNDANG (UU) NOMOR 27 TAHUN 2022 TENTANG PERLINDUNGAN DATA PRIBADI

Personal data protection is a pressing issue in the digital era due to its vulnerability to abuse that can harm society psychologically, socially, and financially. Indonesia faces major challenges in ensuring such protection, despite having passed Law Number 27 of 2022 concerning Personal Data Protection (UU PDP). The rampant cases of personal data leaks, such as the leak of 279 million BPJS Kesehatan data and the hacking of 6 million NPWP data, reflect the lack of supervision and weak implementation of regulations. On the other hand, data protection standards in Indonesia still lag behind international regulations, such as the European Union's General Data Protection Regulation (GDPR). This study aims to answer two main questions: first, what is the concept of state responsibility in protecting personal data according to the PDP Law; and second, is the PDP Law able to overcome the legal vacuum in protecting personal data. A normative legal approach is used by analyzing laws and regulations, legal documents, and related theories. The results of the study show that the PDP Law provides a basic framework for personal data protection, but has significant weaknesses in implementation, such as lack of supervision, unclear sanctions, and overlapping regulations. This study also highlights the need for the establishment of an independent supervisory institution, harmonization of regulations, and increasing digital literacy of the community to improve the effectiveness of personal data protection. Thus, this study is expected to contribute to strengthening personal data protection policies in Indonesia, while increasing public trust in data security in the digital era.