TY - JOUR
T1 - Assessing Indonesian MSMEs' Awareness of Personal Data Protection by PDP Law and ISO/IEC 27001:2013
AU - Astuti, Endah Fuji
AU - Hidayanto, Achmad Nizar
AU - Nurwardani, Sabila
AU - Salsabila, Ailsa Zayyan
N1 - Publisher Copyright:
© 2024 The authors.
PY - 2024/10
Y1 - 2024/10
N2 - Digital technology, while streamlining business operations, also poses significant risks by recording vast amounts of data. This study evaluates the awareness and compliance of Indonesian MSMEs with the Personal Data Protection (PDP) Law and ISO/IEC 27001:2013 standards, highlighting areas needing improvement. Using a quantitative approach, an online questionnaire was distributed to 126 MSMEs across Indonesia to assess legal awareness, consent management, data processing, and governance structures. The analysis, employing descriptive statistics and a Likert scale, reveals a low awareness of the PDP Law (mean score: 3.13) and partial compliance in consent management (mean score: 3.49). While data processing shows strengths (mean score: 3.71), weaknesses in third-party agreements (mean score: 2.67) and the appointment of Data Protection Officers (mean score: 2.98) indicate governance gaps. The findings underscore the struggle of Indonesian MSMEs in implementing crucial data protection practices. The study recommends investing in legal and data protection training, formalizing data agreements, appointing Data Protection Officers, conducting regular audits, and improving data breach management. These steps are vital for fostering a data protection culture and ensuring business sustainability in the digital age.
AB - Digital technology, while streamlining business operations, also poses significant risks by recording vast amounts of data. This study evaluates the awareness and compliance of Indonesian MSMEs with the Personal Data Protection (PDP) Law and ISO/IEC 27001:2013 standards, highlighting areas needing improvement. Using a quantitative approach, an online questionnaire was distributed to 126 MSMEs across Indonesia to assess legal awareness, consent management, data processing, and governance structures. The analysis, employing descriptive statistics and a Likert scale, reveals a low awareness of the PDP Law (mean score: 3.13) and partial compliance in consent management (mean score: 3.49). While data processing shows strengths (mean score: 3.71), weaknesses in third-party agreements (mean score: 2.67) and the appointment of Data Protection Officers (mean score: 2.98) indicate governance gaps. The findings underscore the struggle of Indonesian MSMEs in implementing crucial data protection practices. The study recommends investing in legal and data protection training, formalizing data agreements, appointing Data Protection Officers, conducting regular audits, and improving data breach management. These steps are vital for fostering a data protection culture and ensuring business sustainability in the digital age.
KW - awareness
KW - descriptive statistical analysis
KW - Indonesia MSMEs
KW - ISO/IEC 27001:2013
KW - PDP Law Indonesia
KW - personal data protection
UR - http://www.scopus.com/inward/record.url?scp=85208360865&partnerID=8YFLogxK
U2 - 10.18280/ijsse.140523
DO - 10.18280/ijsse.140523
M3 - Article
AN - SCOPUS:85208360865
SN - 2041-9031
VL - 14
SP - 1559
EP - 1567
JO - International Journal of Safety and Security Engineering
JF - International Journal of Safety and Security Engineering
IS - 5
ER -