Pertanggungjawaban Hukum atas Pelanggaran Data Pribadi dalam Perspektif Undang-Undang Pelindungan Data Pribadi Indonesia

The development of information technology has had a major impact on the personal data management system. In Indonesia, the enactment of Law Number 27 of 2022 concerning Personal Data Protection is a crucial step in guaranteeing individual privacy rights as part of human rights. This study aims to examine the form of legal accountability for personal data violations based on the provisions of the Law Number 27 of 2022. The method used is normative juridical with a statutory regulatory approach. The results of the study show that violations of personal data can be subject to sanctions in two forms, namely administrative and criminal. These sanctions are given to data controllers and parties proven to have violated the provisions, either due to negligence or deliberate actions. Although it has been regulated normatively, implementation in the field still faces a number of challenges, such as weak supervision, lack of legal literacy in the community, and unpreparedness of digital infrastructure. Thus, it is necessary to strengthen supervisory institutions, ongoing public education, and more responsive law enforcement mechanisms. This research is expected to contribute to the development of regulations and practices for personal data protection in Indonesia.