Relevant Aspects regarding Personal Data Protection in the Romanian Constitutional Case-Law

Presented paper concerns to the issue of proper perception of the state in establishing the distinction between personal data protection and principles of publicity. The idea that the information protected by public institutions is a public good is nowadays reinforced by domestic and international legal documents. The aim of the research is to study abovementioned issue in regard with the practice of Georgian Constitutional Court and based on the results, to define the main problems identifying the main line between personal data and principles of publicity. According to case study, it’s clear that individuals are not aware how they can protect their personal data. Data processing organizations themselves violate the requirements of Georgian Law on Personal Data Protection. Current judicial practice makes it possible to believe that violations of abovementioned rights will not only decrease, but will define the proper line between personal data protection and Publicity principles concerning court decisions.

In practice, cases of buying and selling databases containing personal data are still found. Typically, personal data is sold through dark web sites or illegal data trading forums on the internet, such as breached forums. The purpose of this research is to review and analyze personal data protection regulations in accordance with Law Number 27 of 2022; analyze misuse of personal data protection; and analyze future regulations related to personal data protection. This research is a normative juridical research type. The results show that the personal data protection regulations in accordance with Law Number 27 of 2022 concerning Personal Data Protection indicate that the legal purpose of the enactment of Law Number 27 of 2022 concerning Personal Data Protection in cases of criminal acts of personal data trading on digital platforms is to ensure that personal data collected by companies or institutions is processed fairly, securely, and in accordance with applicable law. Misuse of personal data protection includes: submitting false administrative requirements, creating fake accounts, acting as someone else, illegal data trading, bullying and sexual harassment, and information theft. Future regulations related to personal data protection can be implemented in several ways. First, tightening regulations. Second, increasing awareness and education. Third, developing technology for privacy. Fourth, increasing international cooperation; stronger international cooperation on data protection and privacy will be crucial. Fifth, ethical data use.

The Quest for Information Privacy in Africa: A Review Essay

A comparison of data protection legislation and policies across the EU

Telemedicine allows patients to receive remote medical consultation, diagnosis, and treatment through a digital platform. However, with the development of telemedicine, personal data protection has become one of the main concerns. This research aims to compare the regulation of personal data protection in telemedicine services in Indonesia and the European Union. The type of research in this scientific article is Normative Juridical Research with a comparative legal approach. The data sources obtained in this paper are primary data and secondary data. The data collection method is a literature study. The data analysis method in this paper uses a qualitative approach. The results show that personal data protection in Indonesia is regulated by Law Number 27 of 2022 concerning Personal Data Protection (PDP Law). While in the European Union, Personal Data Protection is regulated in the General Data Protection Regulation (GDPR) which regulates the collection and use of personal data by organizations. Some similarities in personal data protection in both telemedicine in Indonesia and in the European Union are that the same consent requires telemedicine providers to obtain clear and explicit consent from patients. Both telemedicine providers must not disclose the patient's personal data to third parties without the patient's consent. Telemedicine providers to implement security measures to protect patient personal data. Both Indonesia and the European Union give patients the right to access, correct, delete, and limit the use of their personal data

The presence regulations related to personal data protection in Indonesia, provide a new task for the Indonesian government.Power in terms of personal data protection Still not yet given space maximum movement related to handling model processing of personal data, including the institution given authority.This research targets existence ecosystem model formulation protection of personal data by institutions processing of personal data.The model was obtained by conducting a comparison law between Indonesia and Malaysia.This is due to Because The Personal Data Protection Law in Malaysia has enacted since 2010.Another thing worth noting apply in the Indonesian PDP Law, namely regarding articles that regulate the duties and functions of the Data Protection Officer (DPO) in terms of his obligation protect personal data in a company.In addition, adjustments and arrangements overlap the overlap understanding from the concept of personal data must aligned.Because this concept is the key decomposer overlap the overlap rule Because the ambiguity of the concept of personal data protection in each regulation legislation.Previous research only conducted research to the extent of personal data protection, not yet leading to the DPO.There is room open to conduct further research related to the role of the DPO.This research uses socio-legal research methods, by linking various discipline science to answer his research.Related to DPO regulations in the ecosystem this personal data protection , Indonesia can be called late realize the rules are different from Malaysia which has own a system personal data protection and plans to improve to keep up with developments This personal data protection system.Malaysia's protection system is in accordance with OECD regulations so that the system formed has apply well.

The article examines the current state of legislation governing the protection of personal data, the challenges arising in its implementation, and the prospects for improving the protection mechanism through the use of blockchain technology. Frequent cases of unlawful dissemination of personal data in Kazakhstan are directly linked to unresolved issue of cybersecurity and the need to address vulnerabilities in the existing legislation, which underscores the relevance of the chosen research topic. The purpose of this study is to establish a legal framework for the protection and security of personal data through the use of digital technologies. The scientific novelty of this work lies in the fact that, for the first time since the formation of the legislative framework governing personal data in the Republic of Kazakhstan, legal norms regarding personal data have been defined, as well as areas of legal regulation for the circulation of certain types of personal data. Measures to improve existing legislation governing the circulation of personal data have been proposed. The above constitutes a national scientific doctrine in the field of personal data protection. New practical conclusions have been summarized, allowing for the improvement of existing national legislation and, consequently, their application in legislative activity. The research methods used include a general logical approach (induction, deduction), systematization, analysis, formulation, scientific methods, and empirical methods. Ensuring the security of personal data is a state obligation arising from the duty to protect individual human rights; therefore, the authors emphasize the particular importance of strengthening control over digital threats and introducing a procedure for assessing their impact on human rights in accordance with international standards. The study concludes that the Republic of Kazakhstan should accede to international instruments establishing standards for the protection of personal data. A potential pathway for strengthening the legal framework on personal data protection lies in establishing systemic safeguards that restrict unauthorized access to information. Such mechanisms should operate across all levels of data governance, ensuring consistent compliance among data holders, processors and supervisory entities. Based on the results of the research, it is proposed to adopt a legal norm regulating continuous control and monitoring by data owners, operators, and persons responsible for organizing the processing and storage of personal data.

The article examines the problems and perspectives of unification of national legislations on personal data protection in the Eurasian Economic Union (EAEU). The “Digital Agenda of the EAEU until 2025” determines the development and adoption of the Agreement on data circulation, including personal data as one of the main priorities. The adoption of this Agreement is relevant due to lack of a unified act regulating personal data protection in the EAEU. The right to privacy is established in the constitutions of all EAEU member states. This right includes the right to personal data protection. The development of digital platforms, providing services in digital format, cross-border transfer of personal data in the field of labor migration, social security and online trade makes the necessity of unification of legal framework on personal data protection in the EAEU member states relevant. The author examined the basic legal acts on personal data protection in the EAEU, determined similarities and distinctive features of legal regulation of collection, processing and protection of personal data, identified problems, and proposed recommendations for unification of national legislations on personal data protection in the EAEU.

Faculty of Business and Management Sciences, Kolej Universiti Islam Perlis, Malaysia As digital technology develops globally, the protection of personal data in the commercial sector becomes extremely important. Cases of selling data to third parties are increasing, and the government is required to tighten provisions in personal protection laws. Therefore, the Personal Data Protection Act 2010 (Act 709) was passed by the Parliament of Malaysia for the purpose of regulating the processing of personal data and to prevent the misuse of the personal data in commercial transactions. The Act confers rights on Data Subjects in relation to the collection, use and or retention (processing) of their Personal Data, and places obligations on Data Users. The Personal Data Protection Order (Group Data Users) 2013 lists the categories of data users who need to register with Personal Data Protection Department. One of group data users is the education sector including educational institutions and private higher education registered under the Private Higher Education Institutions Act 1996 (Act 555). As data users, private higher education institutions are responsible for protecting Personal Data of two categories of data subjects, namely students and employees in the institution. The obligation including to exercise an appropriate policies and procedures to safeguard the Personal Data collected, to maintain data accuracy, and to prevent unauthorized disclosure. This paper aims to measure the implementation of personal data protection laws including the formulation of operational policies and procedures in private higher education institutions. This will be done by looking at the provisions from the Act regarding the principles of data protection as well as the duties for compliance to the legislation. Furthermore, non-compliance of the Act commits an offence and on conviction, be liable to a fine not exceeding RM500,000 or to imprisonment for a term not exceeding 3 years or both. The study also seeks to determine what are the challenges in implementing the Act successfully.

Purpose – The purpose of this paper is to make a case for the recognition of privacy and personal data protection as species of consumer rights in Nigeria in line with the revised United Nations Guidelines for Consumer Protection (UNGCP) by amending existing laws or enacting a new law to provide for personal data protection regime for consumers. Methodology/Approach/Design – The study follows a structured review of relevant extant legislation on consumer protection and personal data protection, namely the Federal Competition and Consumer Protection Act 2018 (FCCPA) and the Nigeria Data Protection Regulation 2019 (NDPR). Findings – The paper identifies that the provisions of Nigeria’s foremost consumer protection legislation, FCCPA, does cover electronic commerce (e-commerce) or consumer privacy and personal data protection while the NDPR, subsidiary legislation on personal data protection, which is yet to be effectively implemented is too general as to provide the consumers the much-needed privacy protection in their dealings with businesses. Practical Implications–Given the importance Recognition of data privacy and personal data protection as a species of consumer rights helps in understanding consumer protection in online transactions and opens opportunities for future research on consumer privacy and data protection. Originality/Value – Given the importance attached to the protection of consumer privacy and the various ramifications of transactions involving exposure of consumers’ personal data, recognition of privacy consumers’ rights to privacy is vital in consolidating knowledge of consumer rights and identifying paths for future research.

In Indonesia, the most recent case of personal data leakage of e-commerce consumers was the personal data leak of the Tokopedia marketplace which occurred in early May 2020. Around 91 million Tokopedia user account data were hacked and sold on the dark web for US$ 5,000. This personal data leak case a lawsuit was filed against the Minister of Communication and Informatics and PT Tokopedia and has been decided by Decision Number: 235/PDT.G/2020/PN.JKT.PST. Protection of personal data in Indonesia deserves to be studied and the problem must be resolved immediately. In this study, a normative juridical method was used and it was found that problems related to regulation also contributed to the fact that the protection of personal data of online application consumers in Indonesia was not maximized. This is due to the fact that existing laws regarding the protection of consumer personal data are still deemed unable to overcome the problems. In addition to regulatory issues, there are also problems regarding the government's lack of oversight of online applications that surf in cyberspace that collect personal data of application users. In this case, it is necessary to immediately pass the Bill on Personal Data Protection.

Purpose: The research objective to be achieved in this study is to determine the protection of personal data in peer to peer lending activities. In this data analysis technique, researchers use research materials in the form of books, journals, documents and research results obtained from a literature review. Methodology: In the data analysis technique, the data obtained will be analyzed using qualitative methods. The qualitative method is observing in their environment by interacting and trying to understand language and interpretations of the world around them. Results: Information technology-based service providers through online, have an obligation to meet personal data protection standards. Protection of personal data is one of the most important things in conducting online transactions, because personal data is related to user security. Limitation: This research contributes to the government and the community must be able to act more thoroughly, meticulously and have a prudent nature, especially when carrying out technology-based lending and borrowing services. Contribution: It is hoped that this law will become a strong legal umbrella for the management and protection of citizens' personal data and government administrators.

Financial Technology (fintech) has been immerged extensively in the last decade. In the realm of disruptive world, there are many areas in which startup companies are developing their business. There is always contradiction when dealing with innovation as core of digital disruption and how privacy remains as hot issues at the edge of everybody's talks. Internet plays important roles to sustain the trends. As rapidly growing country, 68% of Indonesian has access to the Internet. It drives startup companies on financial technology to innovate more and besides that they must comply to regulation in regard with personal data protection. This research aims to appraise how startup company on financial technology protect users' personal data. Personal data protection principles from international organization and Indonesian regulation regarding personal data protection are used to appraise how ABC Corp as a startup company that deliver financial technology service in Indonesian society. To ensure that its service is qualified and trustable, ABC Corp should be appraised using relevant criteria and qualitative approach. The results showed that most of regulations from sectorial supervising agency have been adhered by ABC Corp. The results bring meaningful insight to improve performance on personal data protection. They can became lessons for similar emerging startup companies in financial technology when acquiring their qualifications to protect users' personal data and keep their sustainability.

Introduction: The rapid development of information technology has triggered an increase in digital activities, including the collection and storage of personal data. On the other hand, the phenomenon of theft of personal data and personal identity has become rampant and has caused increasingly significant losses, both materially and immaterially. This study aims to examine legal protection against theft of personal data and personal identity in Indonesia and to examine the law enforcement mechanisms and obstacles faced in the process.The research method used is normative juridical, with a regulatory, conceptual, and comparative approach. Data sources come from literature studies of regulations, legal literature, and relevant court decisions. The results of the study show that personal data protection in Indonesia is still in the developing stage, marked by the enactment of Law Number 27 of 2022 concerning Personal Data Protection. However, there are still limitations to norms in terms of implementation, criminal sanctions, and strong supervisory institutions. In addition, law enforcement against theft of personal data faces various obstacles, including limited authority of law enforcement officers, low public awareness of the importance of protecting personal data, and the complexity of evidence in cases of cross-border cybercrime. International efforts, such as cross-secret cooperation and extradition of perpetrators, are also still not optimal due to differences in legal systems between countries. This study recommends strengthening technical regulations for implementing the PDP Law, increasing the capacity of independent supervisory institutions, educating the public about data security, and increasing international cooperation in combating cybercrime. Effective national legal protection of personal data is an important foundation in maintaining citizens' privacy rights and building trust in the digital ecosystem.Purposes of the Research: Analyze and explain law enforcement against the crime of personal data theft on social media (Facebook).Methods of the Research: The research method used is normative juridical, with a statutory and conceptual approach. Sources of legal materials used are primary, secondary and tertiary legal materials. The technique of collecting legal materials carried out in this research is through library research, namely by searching legal materials by reading, viewing, listening and now many are done by searching through the internet then the data will be analyzed using quantitative data analysis techniques, in an approach Quantitative related to the relationship of variables analyzed using an objective theory, then described to solve the main problem in this study.Results / Findings / Novelty of the Research: Law enforcement against personal data theft in Indonesia has a strong legal basis through the Personal Data Protection Law, the Electronic Information and Transactions (ITE) Law, and other relevant regulations. However, its implementation still faces various obstacles, such as technological limitations, inadequate investigative capabilities, and difficulties in tracking and gathering evidence in the cyber realm. The cross-border nature of cybercrime also presents jurisdictional challenges, necessitating strong international cooperation mechanisms for effective law enforcement

Developments in the notarial world are known as the Cyber Notary system; this opportunity also raises challenges regarding the vulnerability of data misuse in cyberspace. The purpose of this research is to see how personal data is used by Notaries in the implementation of a Cyber Notary, as well as the extent of the notary's responsibility for this Personal Data according to the Personal Data Protection Law in conjunction with the Electronic Transaction and Information Law. This research uses a normative juridical approach, emphasizing library research, to obtain secondary data. The research specifications used are analytical descriptive. The research stage was library research, which was then supported by field research. The data collection techniques that have been collected are analyzed qualitatively. The research results show that the Personal Data Protection Law provides legal certainty regarding the responsibility of the Notary as Data Controller in using the Personal Data of the Applicant, as well as providing limitations to the notary regarding the extent of responsibility for the security of the personal data belonging to the notary by the notary which is also regulated in Article 15, 16, 17 and 19 of the Information and Electronic Transactions Law that the notary must be reliable and guarantee the security and confidentiality of the client or party concerned. Regulations regarding personal data protection protect and guarantee citizens' fundamental rights, provide legal certainty to citizens and protect notaries in carrying out their duties.