Settings On The Search Index Deletion Mechanism In Order To Ensure Legal Certainty

Authors

  • Anas Rafi Prakasya Faculty of Law, Brawijaya University Malang, Indonesia
  • Patricia Audrey Ruslijanto Faculty of Law, Brawijaya University Malang, Indonesia
  • Rachmi Sulistyarini Faculty of Law, Brawijaya University Malang, Indonesia

DOI:

https://doi.org/10.55173/yurisdiksi.v22i2.376

Keywords:

personal data, data deletion, index deletion, legal certainty, personal data protection

Abstract

The digital transformation in Indonesia has triggered fundamental changes in social and economic structures, but in parallel, it has given rise to the risk of permanent negative digital footprints that are destructive to human dignity, as confirmed in the case of the online loan data leak (the case of Indra and Aishah). The main legal problem lies in the existence of incomplete norms and regulatory disharmony between the judicial approach in the ITE Law (PP PSTE 71/2019), which requires a court ruling, and the administrative-autonomous paradigm in the PDP Law 27/2022. This study uses a normative legal method through a statute approach, a conceptual approach, and a comparative approach with prescriptive-analytical analysis techniques. The results show that the current judicial mechanism triggers "Absolute Segregation of Justice" due to cost barriers reaching 16 months of the minimum wage (UMP) and systemic delays (WJP score of 0.52). This study formulates a reconstruction of the mechanism through the transfer of authority from the judiciary to an independent PDP Supervisory Agency. This reconstruction is based on the ethical justification of data subject sovereignty and the application of the Balancing Test procedure through a transparent variable combination matrix. The study's conclusion confirms that the transformation to an administrative pathway is a legal imperative to address the compliance trap for ESOs and ensure legal certainty and the effective and efficient rehabilitation of data subjects' reputations in the era of surveillance capitalism.

References

Adachi, H. (Ed.). (2023). Handbook of the history of the philosophy of law and social philosophy. Springer Nature.

Admiral, A., & Pauck, M. A. (2023). Unveiling the dark side of fintech: Legal analysis of illegal online lending in Indonesia. Lex Scientia Law Review, 12(1).

Article 29 Working Party. (2014). Guidelines on the implementation of the Court of Justice of the European Union judgment on "Google Spain SL and Google Inc. v. Agencia Española de Protección de Datos (AEPD) and Mario Costeja González" (Case C-131/12) (WP225). https://www.law.kuleuven.be/citip

BBC News. (2026, June 11). South Korea fines e-commerce giant $400m over massive data breach. https://www.bbc.com

Bradford, A. (2020). The Brussels effect: How the European Union rules the world. Oxford University Press.

CEPA. (2025). Mapping the Brussels effect: The GDPR goes global. https://cepa.org

Chambers and Partners. (2026). Data protection & privacy 2026: South Korea. https://practiceguides.chambers.com

CMS Law. (2026). GDPR enforcement tracker report 2025/2026. https://cms.law

Court of Justice of the European Union. (2014). Judgment in Case C-131/12, Google Spain SL and Google Inc. v. Agencia Española de Protección de Datos (AEPD) and Mario Costeja González. https://curia.europa.eu

European Data Protection Board. (2024). Annual report 2023. https://edpb.europa.eu

European Union. (2016). Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation). Official Journal of the European Union, L119, 1–88.

Harvard Law Review. (2014). Google Spain SL v. Agencia Española de Protección de Datos. Harvard Law Review, 128, 283–290.

Huda, N. I. I. (2024). Personal data, citizen rights, and the rule of law. Widina Publishing.

Information Commissioner's Office. (2023). Annual report and financial statements 2022/23 (HC 1440). https://ico.org.uk

Kim & Chang. (2023). Amendments to the PIPA passed by the National Assembly. https://www.kimchang.com

Mayer Brown LLP. (2024). UK GDPR and the price of non-compliance: ICO issues new guidance on calculating fines. https://www.mayerbrown.com

MBM Commercial. (2024). Data protection: What are the ICO's enforcement powers? https://www.mbmcommercial.co.uk

Microsoft. (2024). Korea K-ISMS compliance. Microsoft Learn. https://learn.microsoft.com

Personal Information Protection Commission. (2025). Annual report 2024/25. https://www.pipc.go.kr

Republic of Korea. (2023). Personal Information Protection Act (PIPA) (Act No. 16930, as amended). National Law Information Center. https://www.law.go.kr

Reuters. (2026, June 11). South Korea fines Coupang $409 mln in country's largest data breach penalty. https://www.reuters.com

Thales Group. (2023). Achieve Korea ISMS-P compliance: Korean personal information and information security management system certification. https://www.thalesgroup.com

The Record. (2026, June 12). South Korea hits Coupang with record $409 million fine over data breach. https://therecord.media

United Kingdom. (2018). Data Protection Act 2018. https://www.legislation.gov.uk

Wall Street Journal. (2026, June 11). South Korea fines Coupang $410 million over data-law breaches. https://www.wsj.com

World Justice Project. (2025). Rule of Law Index 2025. World Justice Project. https://worldjusticeproject.org

Zuboff, S. (2019). The age of surveillance capitalism: The fight for a human future at the new frontier of power. PublicAffairs.

Indonesian Legislation

Government Regulation of the Republic of Indonesia Number 71 of 2019 concerning the Implementation of Electronic Systems and Transactions. (2019). State Gazette of the Republic of Indonesia of 2019 Number 185, Supplement to State Gazette Number 6400.

Law of the Republic of Indonesia Number 11 of 2008 concerning Electronic Information and Transactions. (2008). State Gazette of the Republic of Indonesia of 2008 Number 58, Supplement to State Gazette Number 4843.

Law of the Republic of Indonesia Number 19 of 2016 concerning Amendments to Law Number 11 of 2008 concerning Electronic Information and Transactions. (2016). State Gazette of the Republic of Indonesia of 2016 Number 251, Supplement to State Gazette Number 5952.

Law of the Republic of Indonesia Number 27 of 2022 concerning Personal Data Protection. (2022). State Gazette of the Republic of Indonesia of 2022 Number 196, Supplement to State Gazette Number 6820.

The 1945 Constitution of the Republic of Indonesia.

Downloads

Published

2026-05-08

How to Cite

Settings On The Search Index Deletion Mechanism In Order To Ensure Legal Certainty. (2026). YURISDIKSI : Jurnal Wacana Hukum Dan Sains, 22(2), 287-302. https://doi.org/10.55173/yurisdiksi.v22i2.376