Urgensi Penerapan UU PDP Nomor 27 Tahun 2022 dalam Pertanggungjawaban Hukum atas Kasus Kebocoran Data NPWP
Abstract
Technological advancements and the growing digitalization of public services have significantly increased the processing of citizens’ personal data.. However, this situation also increases the risk of data leaks, as demonstrated by the leak of Taxpayer Identification Numbers (NPWP) that has affected millions of individuals since September 2024. This study examines the regulatory framework for personal data protection based on Law No. 27 of 2022, evaluates the urgency of its implementation in preventing and responding to data breaches, and analyzes the legal implications for parties that fail to protect personal data. Using a normative juridical method and a statutory approach, the findings show that Law Number 27 of 2022 provides comprehensive regulations for all stages of personal data management and imposes administrative, civil, and criminal sanctions for violations. However, law enforcement still faces challenges in the form of low public legal awareness, weak monitoring mechanisms, limited cross-sector coordination, and the absence of precedents for imposing sanctions and strict legal accountability mechanisms in data breach cases such as NPWP, so that the restoration of data owners' rights has not been optimal. Therefore, strengthening institutional capacity and improving public education are crucial to ensuring effective protection of citizens' privacy in the digital age.
Keywords
Personal Data Protection, Legal Implications, Digitalization, Law Number 27 of 2022
References
Kaharuddin. (2025). Ilmu peraturan perundang-undangan: Pemahaman dasar dan struktur hukum (1st ed.). Kencana.
Cenyvesta, M., & Gunadi, A. (2024). Konsep tanggung jawab negara terhadap kewajiban melindungi data pribadi masyarakat di Indonesia (studi kasus kebocoran data NPWP masyarakat Indonesia). Jurnal Hukum Lex Generalis, 5(12), 1–14.
Della N, D. T. (2025). Pengaruh kebocoran data wajib pajak terhadap kepercayaan dan kepatuhan perpajakan wajib pajak orang pribadi. Jurnal Ilmiah Global Education, 6(2), 436–446. https://doi.org/10.55681/jige.v6i2.3795
Mamonto, D. F. (2024). Analisis perlindungan hukum terhadap penyalahgunaan data pribadi berdasarkan Undang-Undang Nomor 27 Tahun 2022. Lex Privatum, 13(4).
Manurung, E. A. P., & Thalib, E. F. (2022). Tinjauan yuridis perlindungan data pribadi berdasarkan Undang-Undang Nomor 27 Tahun 2022. Jurnal Hukum Saraswati, 4(2), 139–148. https://doi.org/10.36733/jshs.v4i2.5941
Purnama, T. D., & Alhakim, A. (2021). Pentingnya Undang-Undang perlindungan data pribadi sebagai bentuk perlindungan hukum terhadap privasi di Indonesia. Jurnal Komunitas Yustisia, 4(3), 1056–1064.
Puspitasari, D., Izzatusholekha, I., Haniandaresta, S. K., & Afif, D. (2023). Urgensi Undang-Undang perlindungan data pribadi dalam mengatasi masalah keamanan data penduduk. Journal of Administrative and Social Science, 4(2), 195–205. https://doi.org/10.55606/jass.v4i2.403
Rinjani, M. A., & Firmansyah, R. (2025). Hambatan implementasi Undang-Undang Nomor 27 Tahun 2022 dan strategi penguatan perlindungan data pribadi di Indonesia. Jurnal Analisis Hukum, 8(1), 70–83. https://doi.org/10.38043/jah.v8i1.6793
Salsabila, S., & Wiraguna, S. A. (2025). Pertanggungjawaban hukum atas pelanggaran data pribadi dalam perspektif Undang-Undang pelindungan data pribadi Indonesia. Konsensus: Jurnal Ilmu Pertahanan, Hukum, dan Ilmu Komunikasi, 2(2), 145–157. https://doi.org/10.62383/konsensus.v2i2.736
Saly, J. N., Artamevia, H., Kheista, K., Gulo, B. J. S., Rhemrev, E. A., & Christie, M. (2023). Analisis perlindungan data pribadi terkait Undang-Undang Nomor 27 Tahun 2022. Jurnal Serina Sosial Humaniora, 1(3), 145–153.
Setiawan, H. B., & Najicha, F. U. (2022). Perlindungan data pribadi warga negara Indonesia terkait dengan kebocoran data. Jurnal Kewarganegaraan, 6(1), 976–982. https://doi.org/10.31316/jk.v6i1.2657
Sitorus, H. R. P., Lumbanbatu, D. P., Sidebang, D. D., Pratama, D. E., & Gaol, R. S. L. (2025). Tinjauan hukum dan upaya pencegahan terhadap kasus kebocoran data NPWP. Aspirasi: Publikasi Hasil Pengabdian dan Kegiatan Masyarakat, 3(4), 14–18. https://doi.org/10.61132/aspirasi.v3i4.1851
Wibowo, Y., Wulan, I. A. D. P., & Ismiyanto, I. (2025). Tinjauan yuridis tentang perlindungan data pribadi masyarakat pada era digitalisasi. Jurnal Penelitian Serambi Hukum, 18(1), 1–6. https://doi.org/10.59582/sh.v18i01.1216
Republik Indonesia. (2022). Undang-Undang Nomor 27 Tahun 2022 tentang Perlindungan Data Pribadi. https://peraturan.bpk.go.id/Details/238631
Subitmele, S. E. (2024, September 20). 6 juta data NPWP bocor, benarkah pejabat pemerintah jadi sasaran? Liputan6.com. https://www.liputan6.com/hot/read/5706751/6-juta-data-npwp-bocor-benarkah-pejabat-pemerintah-jadi-sasaran
Septian, B. (2022, August 26). Urgensi RUU PDP atas rentetan kasus kebocoran data. Kazee Insight Blog. https://blog.kazee.id/urgensi-ruu-pdp-atas-rentetan-kasus-kebocoran-data
Fajrin, Z. (2024, September 19). CISSReC tegaskan urgensi UU PDP setelah kebocoran data NPWP. Gizmologi. https://gizmologi.id/news/cissrec-urgensi-uu-pdp-kebocoran-data-npwp/
Dinas Komunikasi, Informatika dan Statistik Kota Cirebon. (2025, August 25). UU PDP Nomor 27 Tahun 2022: Hak masyarakat dan urgensi mencegah kebocoran data pribadi. https://dkis.cirebonkota.go.id/artikel/uu-pdp-nomor-27-tahun-2022-hak-masyarakat-dan-urgensi-mencegah-kebocoran-data-pribadi
Lembaga Studi dan Advokasi Masyarakat. (2024, September 19). Dugaan kebocoran data pribadi subjek pajak, kesiapan pelaksanaan kepatuhan UU PDP mengkhawatirkan [Press release]. https://www.elsam.or.id/siaran-pers/dugaan-kebocoran-data-pribadi-subjek-pajak–kesiapan-pelaksanaan-kepatuhan-uu-pdp-mengkhawatirkan
Sugangga, F. (2024, April 23). Mengoptimalkan keamanan data untuk perusahaan besar berdasarkan UU PDP (#1–Pembukaan). SharingVision Insight. https://sharingvision.com/insight/mengoptimalkan-keamanan-data-perusahaan-berdasarkan-uu-pdp/
Hardafi, S. N. (2025, July 9). Ketiadaan lembaga PDP: Celah hukum dalam perlindungan data pribadi. HukumOnline. https://www.hukumonline.com/berita/a/ketiadaan-lembaga-pdp–celah-hukum-dalam-pelindungan-data-pribadi-lt686d4f5817d73/
Published
How to Cite
Issue
Section
Copyright
Copyright (c) 2025 Kaharuddin Kaharuddin, Nindia Rifdah Fakhirah, Cyrill Milanesta Hisyam, Aura Prameswari Wirasmara
The author(s) retain full copyright of this work. The copyright holder grants the journal the right of first publication and the right to distribute the work under the terms of the selected open-access license.
License
This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.
All published content in Takuana: Jurnal Pendidikan, Sains, dan Humaniora is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License (CC BY NC SA 4.0). This license allows others to share, copy, redistribute, and adapt the work for non-commercial purposes, as long as proper credit is given to the original author(s) and source, and any derivative works are distributed under the same license.
Attribution must include a clear citation of the original work and a statement indicating whether any changes were made. Commercial use is not permitted under this license and there is no additional legal or technological restrictions may be applied. For more information about the license terms and permissible use, please refer to the full license text available here.
