Komdigi: Personal data must be protected in accordance with the law

  Rindy, Head of the Digital Space Compliance Monitoring Team at the Indonesian Ministry of Communication and Digital, emphasized that data that can identify a person, either directly or indirectly, is personal data and must be protected in accordance with the Personal Data Protection Law.

Rindy explained that institutional email addresses alone contain sensitive information, such as identity, agency, and location, which can be exploited for cybercrimes such as digital fraud attempts to steal data or phishing .

"When data can identify a person and impact the individual, it falls into the category of personal data," said Rindy at the FHCI Connect Expert 7 event initiated by the Indonesian Human Capital Forum (FHCI) with the theme " HC Technology, Analytics & Governance Roles to Enhance Productivity" at Telkom Landmark Tower, Wednesday (21/1).

He emphasized that personal data protection applies to both electronic and conventionally stored systems. He cited human resource negligence as the primary cause of data breaches in Indonesia.

"Around 90 percent of PDP (personal data protection) cases are still related to personal data leaks, mainly due to low employee awareness," he said.