Tata Kelola dan Tanggung Jawab Hukum Perlindungan Data Pribadi Konsumen dalam Layanan IndiHome by Telkomsel: Studi pada PT Creative Widya Nusantara

Authors

  • Hana Hanifia Yusrima Latifa Hanum Universitas Muhammadiyah Surakarta
  • Wardah Yuspin Yuspin Universitas Muhammadiyah Surakarta
  • Kelik Wardiono Universitas Muhammadiyah Surakarta
  • Khudzaifah Dimyati Universitas Muhammadiyah Surakarta

DOI:

https://doi.org/10.63477/jols.v3i3.624

Keywords:

Personal Data Protection, Data Controller, Data Governance, Legal Responsibility

Abstract

This study employs an empirical legal research method with a qualitative descriptive approach. Data were gathered through interviews, observations, and literature reviews, then analyzed qualitatively via data reduction, data presentation, and conclusion drawing. The findings indicate that Telkomsel acts as the Personal Data Controller, as it determines the purposes and means of data processing and manages the customer database. PT Creative Widya Nusantara serves as an operational partner for marketing and customer registration, while PT Telkom Akses performs technical functions with limited data access. Personal data protection is implemented through mechanisms such as consent, self-uploading of identity data, data access restrictions, identity verification, fulfillment of rights regarding data correction and deletion, and the use of audit trails. The study’s novelty lies in its analysis of the division of legal responsibility between the Personal Data Controller and operational partners during telecommunications service registration. The effectiveness of data protection requires further strengthening through improved consent quality, periodic audits, data security training, and consumer education.

Downloads

Download data is not yet available.

References

Attidhira, Safira Widya, & Permana, Yana Sukma. (2022). Review of Personal Data Protection Legal Regulations in Indonesia. Awang Long Law Review, 5(1), 280–294. https://doi.org/10.56301/awl.v5i1.562

Bygrave, Lee A. (2014). Data Privacy Law: An International Perspective. Oxford University Press.

Creative Widya Nusantara. (2024). Profil Perusahaan. https://creativewidyanusantara.co.id/

Hadjon, Philipus M. (1987). Perlindungan Hukum bagi Rakyat Indonesia: Sebuah Studi tentang Prinsip-Prinsipnya, Penanganannya oleh Peradilan dalam Lingkungan Peradilan Umum dan Pembentukan Peradilan Administrasi Negara. Bina Ilmu.

Judijanto, Loso, Solapari, Nuryati, & Putra, Irman. (2024). An Analysis of the Gap Between Data Protection Regulations and Privacy Rights Implementation in Indonesia. The Easta Journal Law and Human Rights, 3(1), 20–29. https://doi.org/10.58812/eslhr.v3i01.351

Kuner, Christopher, Bygrave, Lee A., & Docksey, Christopher (Eds.). (2020). The EU General Data Protection Regulation (GDPR): A Commentary. Oxford University Press.

Maleno, M. (2024). Comparative Analysis of Indonesia's Personal Data Protection Law with GDPR and CCPA. ILCA Law Review. https://ejournal.psthi.or.id/index.php/ILCALaw/article/view/21

Miles, Matthew B., Huberman, A. Michael, & Saldaña, Johnny. (2014). Qualitative Data Analysis: A Methods Sourcebook (3rd ed.). Sage Publications.

Palit, Sharon M. L., & Purba, T. L. D. (2025). Legal Perspective on Data Privacy Protection as a Human Right in Indonesia. The Easta Journal Law and Human Rights, 4(1). https://doi.org/10.58812/eslhr.v4i01.783

Peraturan Pemerintah Nomor 71 Tahun 2019 tentang Penyelenggaraan Sistem dan Transaksi Elektronik.

Peraturan Menteri Komunikasi dan Informatika Nomor 20 Tahun 2016 tentang Perlindungan Data Pribadi dalam Sistem Elektronik.

Salim, H. S. (2022). Teori dan Metode Penelitian Hukum Empiris. Rajawali Pers.

Solove, Daniel J. (2021). Understanding Privacy. Harvard University Press.

Syailendra, Moody Rizqy, Lie, Gunardi, & Sudiro, Ahmad. (2024). Personal Data Protection Law in Indonesia: Challenges and Opportunities. Indonesia Law Review, 14(2). https://scholarhub.ui.ac.id/ilrev/vol14/iss2/4/

Telkom Akses. (2024). Tentang Perusahaan. https://www.telkomakses.co.id/

Telkomsel. (2024a). Digital Sales Information. https://www.telkomsel.com/explore/DSI

Telkomsel. (2024b). IndiHome by Telkomsel. https://www.telkomsel.com/indihome

Telkomsel. (2024c). Kebijakan Privasi. https://www.telkomsel.com/kebijakan-privasi

Triyanti, N. (2025). Legal Gaps in Personal Data Protection: Reforming Indonesia's Population Administration System. Hasanuddin Law Review. https://doi.org/10.20956/halrev.v11i1.6177

Utami, S. S. K. (2024). Personal Data Protection and Its Regulatory Framework in Indonesia. De Lega Lata: Jurnal Ilmu Hukum. https://doi.org/10.24002/dlc.v1i2.9894

Undang-Undang Nomor 8 Tahun 1999 tentang Perlindungan Konsumen.

Undang-Undang Nomor 36 Tahun 1999 tentang Telekomunikasi.

Undang-Undang Nomor 27 Tahun 2022 tentang Pelindungan Data Pribadi.

Undang-Undang Nomor 1 Tahun 2024 tentang Perubahan Kedua atas Undang-Undang Nomor 11 Tahun 2008 tentang Informasi dan Transaksi Elektronik.

Wawancara dengan Tunjung Aribowo Harimurti, S.Sos., Manager Wilayah Operasional Surakarta PT Creative Widya Nusantara, 8 Juni 2026.

Wawancara dengan Perwakilan PT Telekomunikasi Selular (Telkomsel), 9 Juni 2026.

Wawancara dengan Sales Force PT Creative Widya Nusantara, 9 Juni 2026.

Wawancara dengan Teknisi PT Telkom Akses, 10 Juni 2026.

Downloads

Published

2026-09-30

How to Cite

Hanum, H. H. Y. L., Yuspin, W. Y., Wardiono, K., & Dimyati, K. (2026). Tata Kelola dan Tanggung Jawab Hukum Perlindungan Data Pribadi Konsumen dalam Layanan IndiHome by Telkomsel: Studi pada PT Creative Widya Nusantara. Journal of Legal Sustainability, 3(3), 112–124. https://doi.org/10.63477/jols.v3i3.624
Abstract viewed = 33 times