Data Commercialization in Cybersecurity Law and Policy: A Comparative Study of Indonesia and Malaysia

Authors

  • Hanifah Ghafila Romadona Universitas Internasional Batam, Batam, Indonesia.
  • Mimi Sintia Mohd Bajury Universiti Teknologi Mara, Selangor, Malaysia.
  • Febri Jaya Universitas Internasional Batam, Batam, Indonesia.
  • Stefanus Eko Prasetyo Universitas Internasional Batam, Batam, Indonesia.
  • Haeruddin Universitas Internasional Batam, Batam, Indonesia.

DOI:

https://doi.org/10.38035/gijlss.v4i2.915

Keywords:

Data Commercialization, Indonesia, Malaysia, Personal Data Protection

Abstract

The rapid development of the digital economy has accelerated the commercialization of personal data in Indonesia and Malaysia, raising significant concerns regarding cybersecurity and consumer protection. This study aims to analyze and compare the legal frameworks governing data commercialization in both countries, particularly Indonesia’s Personal Data Protection Law and Malaysia’s Personal Data Protection Act 2010. Using a normative juridical and comparative approach, the study examines regulations related to consent, transparency, consumer rights, and law enforcement. The findings indicate that although both countries have established legal protections for personal data, major challenges remain in implementation, supervision, and enforcement. Weak transparency, unclear consent mechanisms, limited institutional oversight, and inadequate sanctions continue to create risks of personal data misuse and privacy violations. Furthermore, the imbalance of power between corporations and consumers often limits individuals’ control over their personal information. This study concludes that stronger legal enforcement, improved transparency, enhanced consumer awareness, and collaboration between governments, corporations, and society are necessary to ensure effective consumer data protection and create a safer digital ecosystem in Indonesia and Malaysia.

References

Anjawai, N. B., Amboro, F. Y. P., & Hutauruk, R. H. (2022). Perbandingan Perlindungan Hukum Terkait Data Pribadi di Indonesia dan Jerman. AL-MANHAJ: Jurnal Hukum Dan Pranata Sosial Islam, 4(2), 207-218. DOI: https://doi.org/10.70742/ajcos.v1i2.115

Arifin, R., Kambuno, J. A., Waspiah, W., & Latifiani, D. (2021). Protecting the Consumer Rights in the Digital Economic Era: Future Challenges in Indonesia. Jambura Law Review, 3, 135-160. https://jws.rivierapublishing.id/index.php/jws/article/view/584

Batubara, T. H., Marbun, A. S., Lubis, A. D., & Nirodi, M. A. (2025). Perspectives on Commercial Law Enforcement in the Era of Digitalization and Globalization. Jurnal Sahabat ISNU SU, 2(2), 26-30. DOI: https://doi.org/10.70826/jsisnu.v2i2.817

Chong, S. Z., Kuek, C. Y., & Tay, E. S. (2024). Analysis of Image Rights Recognition in Malaysia: A Comparative Study with Selected Jurisdictions. Pakistan Journal of Life & Social Sciences, 22(2). http://www.pjlss.edu.pk/pdf_files/2024_2/15130-15134.pdf

Disemadi, H. S. (2022). Lenses of Legal Research: A Descriptive Essay on Legal Research Methodologies. Journal of Judicial Review, 24(2), 289–304. https://doi.org/10.37253/jjr.v24i2.7280

Disemadi, H. S. (2021). Urgensi regulasi khusus dan pemanfaatan artificial intelligence dalam mewujudkan perlindungan data pribadi di Indonesia. Jurnal Wawasan Yuridika, 5(2), 177-199. DOI: https://doi.org/10.25072/jwy.v5i2.460

Fachri, M., & Dewi, E. F. (2024). Personal Data Usage in Marketing Activity to Comply with PDP Law in Indonesian Digital Commerce Company (Case Study: PT Pitjarus Teknologi). International Research Journal of Economics and Management Studies IRJEMS, 3(1). https://doi.org/10.56472/25835238/IRJEMS-V3I1P111

Farhan, F., Hamdani, F., Astuti, N. L. V. P., Fiqry, H. A. H., & Aulia, M. R. (2022). Reformasi hukum perlindungan data pribadi korban pinjaman online (perbandingan Uni Eropa dan Malaysia). Indonesia Berdaya, 3(3), 567-576. https://ukinstitute.org/journals/ib/article/view/264

Fatmawati, E., Nury, A., Rafa, M. F. F., Sari, A. R., & Hasibuan, M. (2025). Digital Rights Regulation In The AI Era: Privacy Protection and Consumer Rights in Indonesia. Journal of Social and Economics Research, 7(2), 1780-1792. https://idm.or.id/JSER/index.php/JSER/article/view/1344

Judijanto, L., Solapari, N., & Putra, I. (2024). An analysis of the gap between data protection regulations and privacy rights implementation in Indonesia. The Easta Journal Law and Human Rights, 3(01), 20-29. https://esj.eastasouth-institute.com/index.php/eslhr/article/view/351

Kanojia, S., & Zahra, I. A. (2025). Economic Development and Privacy Regulations in Malaysia: The Case of PDPA 2010. In Sustainable Smart Cities and the Future of Urban Development (pp. 443-462). IGI Global Scientific Publishing. https://www.igi-global.com/chapter/economic-development-and-privacy-regulations-imalaysia/364387

Kumar, S. (2024). Assessing the Impact of Indonesia's Personal Data Protection Law on E-commerce Consumer Rights. Problematika Hukum, 10(2), 117-131. https://e-journal.president.ac.id/index.php/problematika-hukum/article/view/5626

Kurnia, G., Setiawan, I., Tridakusumah, A. C., Jaelani, G., Heryanto, M. A., & Nugraha, A. (2022). Local wisdom for ensuring agriculture sustainability: A case from Indonesia. Sustainability, 14(14), 8823. https://www.mdpi.com/2071-1050/14/14/8823

Kurniawan, K. D., Hehanussa, D. J., Setiawan, R., Susilowati, I., & Helfisar, D. (2024). Criminal Sanctions and Personal Data Protection in Indonesia. Lex Publica, 11(2), 221-247. DOI: https://doi.org/10.58829/lp.11.2.2024.255

Kusnadi, S. A. (2021). Perlindungan hukum data pribadi sebagai hak privasi. AL WASATH Jurnal Ilmu Hukum, 2(1), 9-16. DOI: https://doi.org/10.47776/alwasath.v2i1.127

Marune, A. E. M. S., & Hartanto, B. (2021). Strengthening personal data protection, cyber security, and improving public awareness in Indonesia: Progressive legal perspective. International Journal of Business, Economics, and Social Development, 2(4), 143-152. https://v2.rescollacomm.com/index.php/ijbesd/article/view/170

Mudaa, S., Mokhtarb, M. Z., Aminc, W. A. A. M., Sofian, A., & Halimd, A. (2021). Developing Determinant Factors for Product Commercialization and Innovation in Malaysia. International Journal of Innovation, Creativity and Change, 15(9), 560-576. https://ww.ijicc.net/images/Vol_15/Iss_9/15944_Mokhtar_2021_E1_R.pdf

Novri, N., Amboro, F. Y. P., & Hutauruk, R. H. (2023). A Analisis Perlindungan Konsumen Dalam Tindakan Penyalahgunaan Data Pribadi Oleh Penyelenggara Pinjaman Online Berdasarkan Perspektif Hukum Indonesia. AL-MANHAJ: Jurnal Hukum Dan Pranata Sosial Islam, 5(1), 547-556. DOI: https://doi.org/10.37680/almanhaj.v5i1.2488

Prasetyoningsih, N., Ismail Nawang, N., Putri, W. V., & Amirullah, M. N. R. (2024, June). Legal Protection for the Personal Data in Indonesia and Malaysia. In International Conference on Human-Computer Interaction (pp. 161-169). Cham: Springer Nature Switzerland. https://link.springer.com/chapter/10.1007/978-3-031-61379-1_11

Rahmat, A., Imron, K., & Shodiq, M. J. F. (2022). Analisis Kesalahan Bahasa Arab Pada Judul Proposal Mahasiswa UIN Raden Fatah Palembang. Kilmatuna: Journal of Arabic Education, 2(2), 270-280. http://ejournal.unsuda.ac.id/index.php/pba/article/view/78

Tan, D. (2021). Metode penelitian hukum: Mengupas dan mengulas metodologi dalam menyelenggarakan penelitian hukum. Nusantara: Jurnal Ilmu Pengetahuan Sosial, 8(8), 2463-2478. DOI https://doi.org/10.31604/jips.v8i8.2021.2463-2478

Othman, I. W., Topimin, S., Ahmad, S. N. B., & Hasan, H. (2021). Driving the development of SMEs’ entrepreneurs in the era of digitalisation: From the dynamic perspective of law enforcement in Malaysia. International Journal of Accounting, 6(37), 124-143. https://www.researchgate.net/profile/Irma-Othman/publication/356718178_Driving_The_Development_Of_SMEs'_Entrepreneurs_In_The_Era_Of_Digitalisation_From_The_Dynamic_Perspective_Of_Law_Enforcement_In_Malaysia/links/62665e09bca601538b66dd0b/Driving-The-Development-Of-SMEs-Entrepreneurs-In-The-Era-Of-Digitalisation-From-The-Dynamic-Perspective-Of-Law-Enforcement-In-Malaysia.pdf

Prasetyo, B., Handayani, I. G. A. K. R., & Sulistiyono, A. (2025). Data Protection Laws in Indonesia: Navigating Privacy in the Digital Age. Side: Scientific Development Journal, 2(1), 9-16. DOI: https://doi.org/10.59613/petfxv64

Prastyanti, R. A., & Sharma, R. (2024). Establishing consumer trust through data protection law as a competitive advantage in Indonesia and India. Journal of Human Rights, Culture and Legal System, 4(2), 354-390. DOI: https://doi.org/10.53955/jhcls.v4i2.200

Ramadhan, M. C. (2025). Living Law and the Digitalization of Communal Intellectual Property: The Dialectic of Customary Law and the National Data Center. Jurnal Mahkamah: Kajian Ilmu Hukum dan Hukum Islam, 275-290. DOI: https://doi.org/10.25217/jm.v10i2.6643

Rizal, M., Rosadi, S. D., & Taryana, A. (2024). Legal Framework for Consumer Data Protection For Digital Business SMES in Indonesia. Journal of Law and Sustainable Development, 12(1), e2809-e2809. https://ojs.journalsdg.org/jlss/article/view/2809

Rahardjo, T. M. S., Noerdjaja, H., Pambudi, G. E., & Prabowo, M. S. (2025). Consumer protection legal frameworks in indonesia: the challenges of e-commerce and data privacy. Research Horizon, 5(2), 119-128. http://journal.lifescifi.com/index.php/RH/article/view/491

Syailendra, M. R., Lie, G., & Sudiro, A. (2024). Personal data protection law in Indonesia: challenges and opportunities. Indon. L. Rev., 14, 175. https://heinonline.org/hol-cgi-bin/get_pdf.cgi?handle=hein.journals/indolawrev14&section=13

Shahidan, N. H., Abdul Latiff, A. S., & Abdul Wahab, S. (2025). Examining issues and challenges in the commercialization of university generated intellectual property rights in Malaysia. ASEAN Entrepreneurship Journal (AEJ), 11(1), 25-39. https://ir.uitm.edu.my/id/eprint/113511/

Suhaimi, N. S., Abdul Halim, M. A. S., & Hashim, H. A. (2022). Commercialization of academic research: assessing the perception of academicians at a public university in Malaysia. Journal of Applied Research in Higher Education, 14(1), 59-76. https://www.emerald.com/jarhe/article/14/1/59/433506

Tania, S., Tan, D., & Disemadi, H. S. (2024). Urgensi Pengaturan Data dan Informasi Elektronik Sebagai Benda Tidak Berwujud Dalam Sistem Hukum Kebendaan di Indonesia. JURNAL LEGISIA, 16(2), 81-93. https://conferenceproceedings.ump.ac.id/pssh/article/view/1544

Waruwu, S., & Siswoyo, A. A. (2024). Data pribadi sebagai aset bisnis: Sinergi hukum rahasia dagang dan perlindungan data. Lex Lectio Law Journal, 3(2), 118-129. https://jurnalgrahakirana.ac.id/index.php/JLL/article/view/118

Weley, N. C., & Romadona, H. G. (2026). How Can Risk-Based Online Submission Systems Accelerate MSME Growth in Indonesia’s Digital Economy. Barelang Journal of Legal Studies, 4(1). https://journal.uib.ac.id/index.php/barjoules/article/view/11841

Weley, N. C., & Disemadi, H. S. (2022). Implikasi Hukum Pemasangan CCTV di Tempat Umum secara Tersembunyi terhadap Perlindungan Data Pribadi. Amnesti: Jurnal Hukum, 4(2), 79-93. DOI: https://doi.org/10.37729/amnesti.v4i2.2151

Wibowo, A., Alawiyah, W., & Azriadi. (2024). The importance of personal data protection in Indonesia’s economic development. Cogent Social Sciences, 10(1). https://doi.org/10.1080/23311886.2024.2306751

Wijaya, P., & Gusliana, H. B. (2024). Relevansi Hak Privasi Dalam Undang-Undang Nomor 19 Tahun 2016 Tentang Perubahan Atas Undang-Undang Nomor 11 Tahun 2008 Tentang Informasi Dan Transaksi Elektronik Dengan Pasal 28 G Ayat 1 Undang-Undang Dasar Negara Republik Indonesia Tahun 1945. Jurnal Ilmiah Wahana Pendidikan, 10(22), 662-672. http://www.jurnal.peneliti.net/index.php/JIWP/article/view/11126

Wiraguna, S. A. (2025). Strengthening the Functional Autonomy of Data Protection Officers Under Indonesia’s PDP Law 2022: A Critical Legal and Institutional Review. Public Sphere: Jurnal Sosial Politik, Pemerintahan dan Hukum, 4(3). DOI: https://doi.org/10.59818/jps.v4i3.2317

Zaki, N. A. M., & Hashim, F. M. (2023). Effective Process of Commercialization at the Research Institutions in Malaysia. Journal of Advanced Research in Business and Management Studies, 30(1), 45-57. https://www.akademiabaru.com/submit/index.php/arbms/article/view/4702

Zahro, A. K., Nurafni, M. I., Yahya, S. N., & Handoko, D. (2025). Antara Kredibilitas dan Komersialisasi dalam Problematika Etika Praktik Endorsement oleh Influencer Digital. Jurnal Ilmu Sosial dan Humaniora, 1(3), 596-603. http://indojurnal.com/index.php/jisoh/article/view/559

Published

2026-06-29

How to Cite

Romadona, H. G., Bajury, M. S. M., Jaya, F., Prasetyo, S. E., & Haeruddin, H. (2026). Data Commercialization in Cybersecurity Law and Policy: A Comparative Study of Indonesia and Malaysia. Greenation International Journal of Law and Social Sciences, 4(2), 473–486. https://doi.org/10.38035/gijlss.v4i2.915