Study On Sharia Bank Customer Data Leak Indonesia In 2023 : Perspective Of The Data Protection Law Personal No. 27 Of 2022

The development of digitalization in the banking sector has brought ease of access to financial services through digital banking, but it has also increased cybersecurity risks. In May 2023, Bank Syariah Indonesia (BSI) experienced a data leak incident due to a ransomware attack by the LockBit 3.0 group, which revealed weaknesses in the data security system and caused potential losses for customers. This study uses a juridical-normative method to analyze the implementation of the Personal Data Protection Law (PDP Law) No. 27 of 2022 in handling these cases. The results of the study show that BSI as a data controller has a legal obligation to maintain the security of customer data, as stipulated in Article 46 of the PDP Law. However, BSI's delay in providing notifications, lack of information transparency, and negligence in ensuring the protection of personal data indicate non-compliance with these regulations.