Right to Be Forgotten in Indonesia and Thailand: Human Rights-Based Legal Reform Inspired by Korea, the U.S., and the European Union
DOI:
10.54443/ijerlas.v6i2.5224Published:
2026-03-31Downloads
Abstract
The central legal problem of this study lies in the normative inadequacy and weak enforcement construction of the right to be forgotten within the personal data protection regimes of Indonesia and Thailand amid escalating data breaches in Southeast Asia. This research aims to analyze and compare the normative framework governing the right to be forgotten in Indonesia and Thailand with selected global benchmarks, namely the European Union, South Korea, and the United States, in order to formulate ideal legal constructs adaptable to Southeast Asian contexts. This study employs a normative legal research method supported by a comparative legal approach, examining statutory regulations and secondary legal materials from Indonesia, Thailand, the EU (GDPR), South Korea (PIPA), and the United States (CCPA). The findings reveal that although Indonesia’s Personal Data Protection Law and Thailand’s Personal Data Protection Act formally recognize deletion rights, both frameworks remain incomplete due to limited procedural clarity, weak dispute resolution mechanisms, insufficient third-party deletion obligations, and ambiguous safeguards against re-identification risks. In contrast, the EU’s GDPR mandates third-party takedown obligations and imposes severe financial sanctions, South Korea’s PIPA provides strict deletion duties combined with criminal penalties, and the CCPA establishes structured compliance and notification mechanisms. Consequently, strengthening enforcement pathways, clarifying procedural guarantees, and integrating stricter controller obligations are essential for Indonesia and Thailand to ensure effective realization of the right to be forgotten in rapidly expanding digital societies.
Keywords:
Human Rights Data Protection Digital Privacy Right to Be Forgotten Technology LawReferences
Abbass, Hussein A., George Leu, and Kathryn Merrick, ‘A Review of Theoretical and Practical Challenges of Trusted Autonomy in Big Data’, IEEE Access, 2016, 2808–30, doi:10.1109/ACCESS.2016.2571058
Agrawal, Jharna, and Suma Dawn, ‘Analyzing the Anatomy of Strategic Networking in Professional Communities: A Case Study Approach’, in Proceedings of the 2024 Sixteenth International Conference on Contemporary Computing (ACM, 2024), pp. 667–74, doi:10.1145/3675888.3676128
Amoo, Olukunle Oladipupo, Akoh Atadoga, Femi Osasona, Temitayo Oluwaseun Abrahams, Benjamin Samson Ayinla, and Oluwatoyin Ajoke Farayola, ‘GDPR’s Impact on Cybersecurity: A Review Focusing on USA and European Practices’, International Journal of Science and Research Archive, 11.1 (2024), pp. 1338–47, doi:10.30574/ijsra.2024.11.1.0220
Anjani, Nurwulan Rizkiya, and Tulus Warsito, ‘The Factors Driving Success in South Korean Exports: A Case Study of Samsung Electronics’, Jurnal Ilmiah Dinamika Sosial, 7.1 (2023), pp. 77–86, doi:10.38043/jids.v7i1.4286
Bakare, Seun Solomon, Adekunle Oyeyemi Adeniyi, Chidiogo Uzoamaka Akpuokwe, and Nkechi Emmanuella Eneh, ‘Data Privacy Laws and Compliance: A Comparative Review of the EU GDPR and USA Regulations’, Computer Science & IT Research Journal, 5.3 (2024), pp. 528–43, doi:10.51594/csitrj.v5i3.859
Brock, George, The Right to Be Forgotten: Privacy and the Media in the Digital Age, 1st edn (I.B.Tauris & co. Ltd, 2016)
Chan, Kai Tai, ‘Emergence of the “Digitalized Self” in the Age of Digitalization’, Computers in Human Behavior Reports, 6 (2022), pp. 1–7, doi:https://doi.org/10.1016/j.chbr.2022.100191
Cho, Myung-Hwan, ‘Technological Catch-up and the Role of Universities: South Korea’s Innovation-Based Growth Explained through the Corporate Helix Model’, Triple Helix, 1.1 (2014), pp. 2–21, doi:10.1186/s40604-014-0002-1
Choi, Yongrok, Siyu Li, and Hyoungsuk Lee, ‘Korean Paradox of Public Support for the Research and Development Investment in the Sustainable Performance of the Regional Economy’, Land, 13.6 (2024), pp. 1–20, doi:10.3390/land13060759
Cieslik, Katarzyna, and Dániel Margócsy, ‘Datafication, Power and Control in Development: A Historical Perspective on the Perils and Longevity of Data’, Progress in Development Studies, 22.4 (2022), pp. 352–73, doi:10.1177/14649934221076580
Davis, Joanna, Hans-Georg Wolff, Monica L Forret, and Sherry E Sullivan, ‘Networking via LinkedIn: An Examination of Usage and Career Benefits’, Journal of Vocational Behavior, 118 (2020), pp. 1–15, doi:https://doi.org/10.1016/j.jvb.2020.103396
Dayton, Leigh, ‘How South Korea Made Itself a Global Innovation Leader’, Nature, 581.7809 (2020), pp. S54–56, doi:10.1038/d41586-020-01466-7
Delacroix, Sylvie, and Neil D Lawrence, ‘Bottom-up Data Trusts: Disturbing the “One Size Fits All” Approach to Data Governance’, International Data Privacy Law, 9.4 (2019), pp. 236–52, doi:10.1093/idpl/ipz014
Disemadi, Hari Sutra, ‘Lenses of Legal Research: A Descriptive Essay on Legal Research Methodologies’, Journal of Judicial Review, 24.2 (2022), pp. 289–304, doi:10.37253/jjr.v24i2.7280
Donati, Pierpaolo, ‘Being Human (or What?) In the Digital Matrix Land: The Construction of the Humanted’, in Post-Human Futures: Human Enhancement, Artificial Intelligence and Social Theory, 2021, pp. 23–47, doi:10.4324/9781351189958-2
Gracy, Shanitamol Sojan, ‘A Global Analysis of Data Breaches from 2004 to 2024’ (University of London, 2024), doi:10.48550/arXiv.2502.05205
Hosain, Md. Sajjad, and Abdullah Mohammad Ahshanul Mamun, ‘The Roles of LinkedIn-Based Skill Endorsements and LinkedIn-Based Hiring Recommendations on Hiring Preferences: Evidence from Bangladeshi Employers LinkedIn-Based Hiring Recommendations on Hiring Preferences: Evidence from Bangladeshi Employers’, Management Matters, 20.2 (2023), pp. 169–84, doi:10.1108/MANM-05-2023-0021
Jakobi, Timo, Maximilian von Grafenstein, Patrick Smieskol, and Gunnar Stevens, ‘A Taxonomy of User-Perceived Privacy Risks to Foster Accountability of Data-Based Services’, Journal of Responsible Technology, 10 (2022), pp. 1–14, doi:https://doi.org/10.1016/j.jrt.2022.100029
Jeon, Gyeong Suk, and Kyungwon Choi, ‘Purposes of Internet Use and Its Impacts on Physical and Psychological Health of Korean Older Adults’, Healthcare (Switzerland), 12.2 (2024), pp. 1–12, doi:10.3390/healthcare12020244
Judijanto, Loso, Nuryati Solapari, and Donny Eddy Sam Karauwan, ‘A Bibliometric Analysis of Legal Approaches to Personal Data Protection’, The Easta Journal Law and Human Rights, 2.3 (2024), pp. 165–75, doi:10.58812/eslhr.v2i03.285
Kirk, Shania Ann, ‘Breaking Away: How to Regain Control Over Our Data, Privacy, and Autonomy by Maurice E. Stucke, Oxford, Oxford University Press, 2022, 275 Pp.’, European Journal of Risk Regulation, 14.4 (2023), pp. 823–25, doi:DOI: 10.1017/err.2023.6
Kohl, Uta, ‘The Right to Be Forgotten in Data Protection Law and Two Western Cultures of Privacy’, International and Comparative Law Quarterly, 72.3 (2023), pp. 737–69, doi:DOI: 10.1017/S0020589323000258
Lawrance, Vincent, ‘Book Review: The Right to Be Forgotten: Privacy and Media in the Digital Age’, Media International Australia, 167.1 (2018), pp. 182–83, doi:10.1177/1329878X18756108
Lee, Hyeongjik, Seonkoo Jeong, and Kwanghee Lee, ‘The South Korean Case of Deploying Rural Broadband via Fiber Networks by Implementing Universal Service Obligation and Public-Private Partnership Based Project’, Telecommunications Policy, 47.3 (2023), pp. 1–17, doi:https://doi.org/10.1016/j.telpol.2023.102506
Lee, Sasha, and Alberto Iskandar, ‘Southeast Asia, Cyber Threats, and Opportunities for Canadian Co-Operation: The Cases of Singapore and the Philippines’, The Asia Pacific Foundation of Canada (APF Canada), 2024 <https://www.asiapacific.ca/publication/southeast-asia-cyber-threats-and-opportunities-canadian-co> [accessed 18 February 2025]
Mantelero, Alessandro, ‘The Future of Data Protection: Gold Standard vs. Global Standard’, Computer Law & Security Review, 40 (2021), pp. 1–5, doi:https://doi.org/10.1016/j.clsr.2020.105500
Nakashima, Mika, ‘The Legal Frameworks of the Right to Request the Deletion of Personal Data in the EU, the U.S. and Japan and the Right to Be Forgotten: A Study Focusing on Search Businesses’, in IFIP Advances in Information and Communication Technology, 2020, dxc, 29–40, doi:10.1007/978-3-030-62803-1_3
Parker, Janna M, Shelly Marasi, Kevin W James, and Alison Wall, ‘Should Employees Be “Dooced” for a Social Media Post? The Role of Social Media Marketing Governance’, Journal of Business Research, 103 (2019), pp. 1–9, doi:https://doi.org/10.1016/j.jbusres.2019.05.027
Pereira, Carolina, Anabela Marto, Roberto Ribeiro, Alexandrino Gonçalves, Nuno Rodrigues, Carlos Rabadão, and others, ‘Security and Privacy in Physical–Digital Environments: Trends and Opportunities’, Future Internet, 17.2 (2025), pp. 1–23, doi:10.3390/fi17020083
Ponemon Institute, and IBM Security, Cost of a Data Breach 2022, IBM Corportation and Ponemon Institute Research (2022) <https://newsroom.ibm.com/2022-07-27-IBM-Report-Consumers-Pay-the-Price-as-Data-Breach-Costs-Reach-All-Time-High>
Prabasari, Ni Kadek Dhea Ardi, Kadek Januarsa Adi Sudharma, and Michael Angelo, ‘The Right to Be Forgotten: Regulation of Personal Data Deletion in Indonesia’, KRTHA BHAYANGKARA, 18.3 (2024), pp. 541–58, doi:10.31599/krtha.v18i3.3291
Primawanti, Henike, Agus Subagyo, and Windy Dermawan, ‘ASEAN 4.0. Era: Development in Digital Economy and Trade Sector’, Dinamika Global: Jurnal Ilmu Hubungan Internasional, 7.2 (2022), pp. 333–49, doi:https://doi.org/10.36859/jdg.v7i02.1279
Putri, Ni Made Dwi Gayatri, Ni Luh Made Mahendrawati, and Ni Made Puspasutari Ujianti, ‘Perlindungan Hukum Terhadap Data Pribadi Warga Negara Indonesia Berdasarkan Undang-Undang Nomor 27 Tahun 2022’, Jurnal Preferensi Hukum, 5.2 (2024), pp. 240–45, doi:10.22225/jph.5.2.8087.240-245
Ramokapane, Kopo Marvin, and Awais Rashid, ‘ExD: Explainable Deletion’, in New Security Paradigms Workshop (ACM, 2023), pp. 34–47, doi:10.1145/3633500.3633503
Rizkinaswara, Leski, ‘Dugaan Kebocoran Data SIM Card, Kominfo Lakukan Koordinasi Dengan Ekosistem Pengendali Data’, Direktorat Jenderal Aplikasi Informatika KOMINFO, 2022 <https://aptika.kominfo.go.id/2022/09/dugaan-kebocoran-data-sim-card-kominfo-lakukan-koordinasi-dengan-ekosistem-pengendali-data/> [accessed 18 February 2025]
Saharuddin, Saharuddin, ‘Pros-Cons of Implementing the Right to Be Forgotten Rules in the ITE Law’, Amsir Law Journal, 2.1 (2020), pp. 27–30, doi:10.36746/alj.v2i1.31
Santana, Paulo Campanha, and Faiz Ayat Ansari, ‘Data Protection and Privacy as a Fundamental Right: A Comparative Study of Brazil and India’, Journal of Liberty and International Affairs, 9.3 (2023), pp. 456–70, doi:10.47305/JLIA2393555cs
Shahrullah, Rina Shahriyani, Jihyun Park, and Irwansyah Irwansyah, ‘Examining Personal Data Protection Law of Indonesia and South Korea: The Privacy Rights Fulfilment’, Hasanuddin Law Review, 10.1 (2024), pp. 1–20, doi:10.20956/halrev.v10i1.5016
Spalević, Žaklina, and Kosana Vićentijević, ‘GDPR and Challenges of Personal Data Protection’, The European Journal of Applied Economics, 19.1 (2022), pp. 55–65, doi:10.5937/ejae19-36596
Sriyai, Surachanee, ‘Data Leaks: Thai Government Tough on Private Firms, Soft on Public Sector and Cybercriminals’, Fulcrum, 2024 <https://fulcrum.sg/data-leaks-thai-government-tough-on-private-firms-soft-on-public-sector-and-cybercriminals/> [accessed 18 February 2025]
Steinbart, Paul, Mark J. Keith, and Jeffry S. Babb, ‘Measuring Privacy Concerns and the Right to Be Forgotten’, in Proceedings of the Annual Hawaii International Conference on System Sciences, 2017, mmxvii-Janua, 4967–76, doi:10.24251/hicss.2017.603
Sudirman, Lu, Hari Sutra Disemadi, and Arwa Meida Aninda, ‘Comparative Analysis of Personal Data Protection Laws in Indonesia and Thailand: A Legal Framework Perspective’, Jurnal Etika Demokrasi, 8.4 (2023), pp. 497–510 <https://journal.unismuh.ac.id/index.php/jed/article/view/12875>
Sukmawan, Denny Indra, and David Putra Setyawan, ‘Hacker, Fear, and Harm: Data Breaches and National Security’, Jurnal Global & Strategis, 17.1 (2023), pp. 153–82, doi:10.20473/jgs.17.1.2023.153-182
Syailendra, Moody Rizqy, Gunardi Lie, and Amad Sudiro, ‘Personal Data Protection Law in Indonesia: Challenges and Opportunities’, Indonesia Law Review, 14.2 (2024), pp. 56–72 <https://scholarhub.ui.ac.id/ilrev/vol14/iss2/4/>
Tan, David, ‘Metode Penelitian Hukum: Mengupas Dan Mengulas Metodologi Dalam Menyelenggarakan Penelitian Hukum’, NUSANTARA: Jurnal Ilmu Pengetahuan Sosial, 8.5 (2021), pp. 2463–78 <https://jurnal.um-tapsel.ac.id/index.php/nusantara/article/view/5601>
Tung, Rosalie L, Ivo Zander, and Tony Fang, ‘The Tech Cold War, the Multipolarization of the World Economy, and IB Research’, International Business Review, 32.6 (2023), pp. 1–14, doi:https://doi.org/10.1016/j.ibusrev.2023.102195
Utomo, Setyo, ‘Personal Data Protection Through Law Number 27 of 2022: Challenges of Cybercrime in the Era of Globalization and Digital’, Pena Justisia: Media Komunikasi Dan Kajian Hukum, 23.3 (2024), pp. 2967–75, doi:10.31941/pj.v23i3.5611
Verhoef, Peter C, Thijs Broekhuizen, Yakov Bart, Abhi Bhattacharya, John Qi Dong, Nicolai Fabian, and others, ‘Digital Transformation: A Multidisciplinary Reflection and Research Agenda’, Journal of Business Research, 122 (2021), pp. 889–901, doi:https://doi.org/10.1016/j.jbusres.2019.09.022
Wang, Qian, Eric W.T. Ngai, Daniel Pienta, and Jason Bennett Thatcher, ‘Information Technology Innovativeness and Data-Breach Risk: A Longitudinal Study’, Journal of Management Information Systems, 40.4 (2023), pp. 1139–70, doi:10.1080/07421222.2023.2267319
Wong, Richmond Y., Andrew Chong, and R. Cooper Aspegren, ‘Privacy Legislation as Business Risks: How GDPR and CCPA Are Represented in Technology Companies’ Investment Risk Disclosures’, Proceedings of the ACM on Human-Computer Interaction, 7.CSCW1 (2023), pp. 1–26, doi:10.1145/3579515
Xie, Sherry Li, ‘Retention in “the Right to Be Forgotten” Scenario: A Records Management Examination’, Records Management Journal, 26.3 (2016), pp. 279–92, doi:10.1108/RMJ-11-2015-0038
License
Copyright (c) 2026 Ampuan Situmeang, Lu Sudirman, Ida Bagus Rahmadi Supancana, Nurlaily, Hari Sutra Disemadi
This work is licensed under a Creative Commons Attribution 4.0 International License.
Downloads
How to Cite
