CROSS BORDER PERSONAL DATA PROTECTION AND GLOBAL JURISDICTIONAL CONFLICTS
Abstract
The development of information technology and the digital economy has driven an increase in the flow of cross border personal data transfers. This activity benefits international trade, cloud computing services, social media, and various digital platforms, but also raises legal challenges related to personal data protection and jurisdictional conflicts between countries. Differences in data protection regulatory standards, such as between countries with strict data protection regimes and those with looser regulations, create legal uncertainty in enforcing data subjects' rights. This study aims to analyze the forms of personal data protection in cross-border data transfers and examine jurisdictional conflicts arising from differences in legal systems across countries. The research method used is normative legal research with a statutory and comparative approach. The results show that cross-border personal data transfers require adequate protection mechanisms, including the principle of equal levels of protection (adequacy principle), data subject consent, and international cooperation between data protection authorities. Global jurisdictional conflicts arise when data is processed, stored, or accessed in several countries with differing legal provisions, complicating oversight and law enforcement. Therefore, harmonization of international regulations and strengthening cooperation between countries are necessary to ensure effective personal data protection in the global digital era.
References
Court of Justice of the European Union. (2020). Data Protection Commissioner v. Facebook Ireland Ltd and Maximillian Schrems (Case C-311/18). Court of Justice of the European Union.
European Parliament & Council of the European Union. (2016). Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation). Official Journal of the European Union, L119, 1–88. https://eur-lex.europa.eu/eli/reg/2016/679/oj
Greenleaf, G. (2022). Global data privacy laws 2022: Despite COVID delays, 157 laws show GDPR dominance. Privacy Laws & Business International Report, 175, 10–13.
Handapangoda, W. (2026). Artificial intelligence, cross-border data governance and privacy protection in the digital era. Journal of Digital Law and Policy, 8(1), 45–62.
Isaak, J., & Hanna, M. J. (2018). User data privacy: Facebook, Cambridge Analytica, and privacy protection. Computer, 51(8), 56–59. https://doi.org/10.1109/MC.2018.3191268
Kuner, C., Bygrave, L. A., & Docksey, C. (Eds.). (2020). The EU General Data Protection Regulation (GDPR): A commentary. Oxford University Press. https://doi.org/10.1093/oso/9780198826491.001.0001
Marzuki, P. M. (2021). Legal research (Rev. ed.). Kencana.
Mayer-Schönberger, V., & Cukier, K. (2013). Big data: A revolution that will transform how we live, work, and think. John Murray Publishers. https://www.hmhbooks.com/shop/books/BigData/9780544227750
Murray, A. (2022). Information technology law: The law and society (5th ed.). Oxford University Press.
OECD. (2013). OECD guidelines governing the protection of privacy and transborder flows of personal data. Organisation for Economic Co-operation and Development.
OECD. (2023). OECD digital economy outlook 2023. Organisation for Economic Co-operation and Development. https://www.oecd.org/digital/oecd-digital-economy-outlook/
Republic of Indonesia. (2022). Law Number 27 of 2022 concerning personal data protection. State Gazette of the Republic of Indonesia 2022 Number 196.
Soekanto, S., & Mamudji, S. (2018). Normative legal research: A brief review. RajaGrafindo Persada.
Svantesson, D. J. B. (2017). Solving the Internet jurisdiction puzzle. Oxford University Press.
Svantesson, D. J. B. (2020). The future of data privacy law: International perspectives. Edward Elgar Publishing.
Zainuddin, A. (2023). Legal research methods. Sinar Grafika.
