Email this article 
ENABLING DATA PORTABILITY AND INTEROPERABILITY UNDER INDONESIA'S DATA PROTECTION LAW
Copyright (c) 2024 Masalah-Masalah Hukum License URL: http://creativecommons.org/licenses/by-nc/4.0
Abstract
The Indonesian parliament ratified the Personal Data Protection (PDP) Law in October 2022, introducing the Right to Data Portability (RtDP) in Article 13. This concept enables seamless information transfer, enhances personal control, and fosters innovation in the digital economy. This study analyzed data portability provisions under the PDP Law and drew insights from the EU and UK's experiences. Findings showed that data portability under the PDP Law, similar to the GDPR, fell short due to the absence of standardized guidelines, interoperability architectures, and non-mandatory compatibility policies. Prioritizing Open APIs for interoperability was crucial. Effective public-private collaboration was key in establishing sector-specific and cross-sector interoperability standards aligned with PDP Law regulations
Keywords
References
Andreoni, A., & Roberts, S. (2022). Governing digital platform power for industrial development: towards an entrepreneurial-regulatory state. Cambridge Journal of Economics, 19–20. https://doi.org/10.1093/cje/beac055
Biglaiser, G., Calvano, E., & Crémer, J. (2019). Incumbency advantage and its value. Journal of Economics & Management Strategy, 28(1), 41–48. https://doi.org/10.1111/jems.12307
Borgogno, O., & Colangelo, G. (2019). Data Sharing and Interoperability: Fostering Innovation and Competition through APIs. Computer Law & Security Review, 35(5), 105314. https://doi.org/10.1016/j.clsr.2019.03.008
Brown, I. (2022). The UK’s Midata and Open Banking programmes: a case study of data portability and interoperability requirements. Technology and Regulation, 113–123.
Centre on Regulation in Europe (CERRE). (2020). Two years of GDPR: where does Europe stand on data portability? Retrieved from https://cerre.eu/news/two-years-of-gdpr-where-does-europe-stand-on-data-portability/
Colangelo, G., & Maggiolino, M. (2019). From Fragile to Smart Consumers: Shifting Paradigm for the Digital Era. Computer Law & Security Review, 35(2), 173–181. https://doi.org/10.1016/j.clsr.2018.12.004
Cooper, M. (2021). How Open Banking is Democratising Finance. ITNOW, 63(3), 20–21. https://doi.org/10.1093/itnow/bwab071
De Hert, P., Papakonstantinou, V., Malgieri, G., Beslay, L., & Sanchez, I. (2018). The Right to Data portability in the GDPR: Towards User-centric Interoperability of Digital Services. Computer Law & Security Review, 34(2), 193–203. https://doi.org/10.1016/j.clsr.2017.10.003
de Weck, O. L. (2022). Technology Strategy and Competition. In Technology Roadmapping and Development (pp. 277–300). Cham: Springer International Publishing. https://doi.org/10.1007/978-3-030-88346-1_10
Delacroix, S., & Lawrence, N. D. (2019). Bottom-up data Trusts: disturbing the ‘one size fits all’ approach to data governance. International Data Privacy Law, 9(4), 252. https://doi.org/10.1093/idpl/ipz014
Department for Business, E. & I. S. (2018). Smart Data Review. Retrieved from https://www.gov.uk/government/publications/smart-data-review
Department for Business, I. & S. (2011). The midata vision of consumer empowerment. Retrieved from https://www.gov.uk/government/news/the-midata-vision-of-consumer-empowerment
Department for Business, I. & S. (2012). Midata 2012 review and consultation.
Economides, N., & Lianos, I. (2021). Restrictions On Privacy and Exploitation In The Digital Economy: A Market Failure Perspective. Journal of Competition Law & Economics, 17(4), 765–847. https://doi.org/10.1093/joclec/nhab007
European Comission. (2020). A European strategy for data. Retrieved from https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A52020DC0066
Gill, D., & Kerber, W. (2020). Data Portability Rights: Limits, Opportunities, and the Need for Going Beyond the Portability of Personal Data. SSRN Electronic Journal, 1–11. https://doi.org/10.2139/ssrn.3715357
Graef, I., Husovec, M., & Boom, J. van den. (2020). Spill-Overs in Data Governance: Uncovering the Uneasy Relationship Between the GDPR’s Right to Data Portability and EU Sector-Specific Data Access Regimes. Journal of European Consumer and Market Law, 9(1), 3 – 16. Retrieved from https://kluwerlawonline.com/journalarticle/Journal+of+European+Consumer+and+Market+Law/9.1/EuCML2020002
Graef, I., Husovec, M., & Purtova, N. (2018). Data Portability and Data Control: Lessons for an Emerging Concept in EU Law. German Law Journal, 19(6), 1359–1398. https://doi.org/10.1017/S2071832200023075
Hesse, M., Teubner, T., & Adam, M. T. P. (2022). In Stars We Trust – A Note on Reputation Portability Between Digital Platforms. Business & Information Systems Engineering, 64(3), 349–358. https://doi.org/10.1007/s12599-021-00717-9
Hicks, J. (2021). A ‘data realm’ for the Global South? Evidence from Indonesia. Third World Quarterly, 42(7), 1417–1435. https://doi.org/10.1080/01436597.2021.1901570
Hondagneu-Messner, S. (2021). Data Portability: A Guide and a Roadmap. Rutgers Computer and Technology Law Journal, 47(2), 241–273. Retrieved from https://heinonline.org/HOL/LandingPage?handle=hein.journals/rutcomt47&div=12&id=&page=
Hoofnagle, C. J., van der Sloot, B., & Borgesius, F. Z. (2019). The European Union general data protection regulation: what it is and what it means. Information & Communications Technology Law, 28(1), 65–98. https://doi.org/10.1080/13600834.2019.1573501
Information Commissioner’s Office. (n.d.). Right to data portability. Retrieved from https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-data-portability/
Kira, B., Sinha, V., & Srinivasan, S. (2021). Regulating digital ecosystems: bridging the gap between competition policy and data protection. Industrial and Corporate Change, 30(5), 1337–1360. https://doi.org/10.1093/icc/dtab053
Krämer, J., Senellart, P., & Streel, A. de. (2020). Making data portability more effective for the digital economy.
Krämer, J., & Stüdlein, N. (2019). Data portability, data disclosure and data-induced switching costs: Some unintended consequences of the General Data Protection Regulation. Economics Letters, 181, 99–103. https://doi.org/10.1016/j.econlet.2019.05.015
Kuebler-Wachendorff, S., Luzsa, R., Kranz, J., Mager, S., Syrmoudis, E., Mayr, S., & Grossklags, J. (2021). The Right to Data Portability: conception, status quo, and future directions. Informatik Spektrum, 44(4), 264–272. https://doi.org/10.1007/s00287-021-01372-w
Laje, A., & Schmidt, K. (2024). The Right to Data Portability as a Personal Right. Laws, 13(4), 47. https://doi.org/10.3390/laws13040047
Lam, W. M. W., & Liu, X. (2020). Does Data Portability Facilitate Entry? International Journal of Industrial Organization, 69, 102564. https://doi.org/10.1016/j.ijindorg.2019.102564
Li, Weinlong. (2019). Data portability as a new means of data protection? Examining the right to data portability in the EU General Data Protection Regulation. University of Edinburgh.
Li, Wenlong. (2022). Between incrementalism and revolution: How the GDPR right to data portability is revamped by the EU and the UK post Brexit. In Research Handbook on EU Data Protection Law (p. 576). Edward Elgar Publishing. https://doi.org/10.4337/9781800371682.00031
Mazzi, F., Adonis, A., Cowls, J., Tsamados, A., Taddeo, M., & Floridi, L. (2022). The UK reform of data protection: key changes and their ethical, social and legal implications. International Journal of Law and Information Technology. https://doi.org/10.1093/ijlit/eaac024
Nebbiai, M. (2022). Intermediaries do matter: voluntary standards and the Right to Data Portability. Internet Policy Review, 11(2), 1–28.
Nicholas, G. (2021). Taking It With You: Platform Barriers to Entry and the Limits of Data Portability. Michigan Technology Law Review, 27, 263–297. Retrieved from https://repository.law.umich.edu/mtlr/vol27/iss2/3/
Nixdorf, W. (2020). Planting in a Walled Garden: Data Portability Policies To Inform Consumers How Much (if any) of the Harvest is Their Share. Transnational Law & Contemporary Problems, 29, 135–164.
Organisation for Economic, & Co-operation and Development. (2021). Mapping out data portability initiatives, opportunities, and challenges. Retrieved from https://www.oecd.org/publications/mapping-data-portability-initiatives-opportunities-and-challenges-a6edfab2-en.htm
Paul Jurcys, Chris Donewald, Jure Globocnik, and M. L. (2020). My Data, My Terms: A Proposal for Personal Data Use Licenses. Harvard Journal of Law & Technology Digest, 33, 1–14. Retrieved from https://jolt.law.harvard.edu/digest/my-data-my-terms
Qiu, Y. (2017). The openness of Open Application Programming Interfaces. Information, Communication & Society, 20(11), 1720–1736. https://doi.org/10.1080/1369118X.2016.1254268
Rosadi, S. D., Noviandika, A., Walters, R., & Aisy, F. R. (2022). Indonesia’s personal data protection bill, 2020: does it meet the needs of the new digital economy? International Review of Law, Computers & Technology, 1–13. https://doi.org/10.1080/13600869.2022.2114660
Ryngaert, C., & Taylor, M. (2020). The GDPR as Global Data Protection Regulation? American Journal of International Law, 114, 5–9. https://doi.org/10.1017/aju.2019.80
Swire, P., & Lagos, Y. (2013). Why the Right to Data Portability Likely Reduces Consumer Welfare: Antitrust and Privacy Critique. Maryland Law Review, 72(1), 341–379. Retrieved from https://digitalcommons.law.umaryland.edu/mlr/vol72/iss2/1/
UK Parliament. (2022). Data Protection and Digital Information Bill. Retrieved from https://bills.parliament.uk/bills/3322
Ursic, H. (2018). Unfolding the New-Born Right to Data Portability: Four Gateways to Data Subject Control. SCRIPT-Ed, 15(1), 42–69. https://doi.org/10.2966/scrip.150118.42
Vezzoso, S. (2021). Competition Policy in Transition: Exploring Data Portability’s Roles. Journal of European Competition Law & Practice, 12(5), 357–369. https://doi.org/10.1093/jeclap/lpaa096
Vrabec, H. U. (2021). Data Portability as a Data Subject Right. In Data Subject Rights under the GDPR (pp. 170–172). Oxford University Press. https://doi.org/10.1093/oso/9780198868422.003.0007
Walters, R., Trakman, L., & Zeller, B. (2019). Law, Technology and Digital Economy. In Data Protection Law (pp. 27–42). Singapore: Springer Nature Singapore. https://doi.org/10.1007/978-981-13-8110-2_2
Weston, S. (2017). Improving interoperability by encouraging the sharing of interface specifications. Law, Innovation and Technology, 9(1), 78–116. https://doi.org/10.1080/17579961.2017.1302695
Wong, J., & Henderson, T. (2019). The Right to Data Portability in Practice: Exploring the Implications of the Technologically Neutral GDPR. International Data Privacy Law, 9(3), 173–191. https://doi.org/10.1093/idpl/ipz008
Wong, J., Henderson, T., & Ball, K. (2022). Data protection for the common good: Developing a framework for a data protection-focused data commons. Data & Policy, 4, 26. https://doi.org/10.1017/dap.2021.40
Yan, X., & He, H. (2022). Fine-tuning the Ex Ante Approach to Regulating Data Combination Practices. Journal of Competition Law & Economics, 18(4), 881–904. https://doi.org/10.1093/joclec/nhac005
Zanfir, G. (2012). The right to Data portability in the context of the EU data protection reform. International Data Privacy Law, 2(3), 149–162. https://doi.org/10.1093/idpl/ips009
Zufall, F., & Zingg, R. (2021). Data Portability in a Data-Driven World. In Artificial Intelligence and International Economic Law (pp. 215–234). Cambridge: Cambridge University Press. https://doi.org/10.1017/9781108954006.012
