Melola Discovery

← Melola Discovery

Journal

Legal Protection for Biznet Customers for Data Leak from the Perspective of Law Number 27 of 2022

Law Research Review Quarterly · Vol. 12 No. 4 (2026) · pp. 2105–2129

DOI
10.15294/lrrq.v12i4.47393
ISSN
2716-3415
Published
2026-03-06
Publisher
Universitas Negeri Semarang
Language
eng

Abstract

The incident of PT Biznet Networks' data leak in March 2024 which impacted more than 380,000 customer data became the starting point of this study. This study aims to analyze two main problems: (1) legal protection and Biznet's responsibility for the leakage of customers' personal data based on Law Number 27 of 2022 concerning Personal Data Protection; and (2) critical evaluation of the Personal Data Protection Law in the case of Biznet data leak. This study applies a normative legal approach, supported by a regulatory analysis and a conceptual perspective. The findings of the study reveal that Biznet customers are positioned as Personal Data Subjects who receive layered protection from the Personal Data Protection Law, Consumer Protection Law, and Civil Code. Preventive protection is realized through a series of obligations imposed on data controllers, while repressive protection is available through three cumulative channels: administrative, civil, and criminal. Biznet is juridically positioned as the Personal Data Controller who bears the burden of reverse proof and non-delegable liability. The effectiveness of this legal framework is still constrained by the lack of independent supervisory institutions as mandated.

Keywords

Collaboration network of the authors

40 authors · 156 co-authorship links · showing the 40 most connected

Hover or tap a name to highlight its co-authors. Double-click to open the author's page.

  • State University of Semarang
  • Affiliation unknown
  • Different organisations
  • Same organisation
  • Affiliation unknown
  • Thicker line = more joint articles · bigger circle = more articles
Show as table
Co-authorOrganisationJoint articles
Wahyu DwiantoAffiliation unknown5
Danang Sudarwoko AdiAffiliation unknown4
Rodiyah RodiyahAffiliation unknown3
Muhammad Azil MaskurAffiliation unknown3
Yusup AminAffiliation unknown3
Indah LutfiyaAffiliation unknown3
Winarsih WinarsihState University of Semarang2
Mutmainah Nur QoiriAffiliation unknown2
Rini FidiyaniAffiliation unknown2
Destika Santi Putri SarfitriAffiliation unknown2
Jamaluddin Jamal MuhsenAffiliation unknown2
Indah Sri UtariAffiliation unknown2
Diandra Preludio RamadaAffiliation unknown2
Putri Balqis Nuril HakimAffiliation unknown2
Ahmad Gelora MahardikaAffiliation unknown2
Ali MasyharAffiliation unknown2
Fitriani AbdiAffiliation unknown2
Salman AlfarisiAffiliation unknown2
Bayangsari WedhatamiAffiliation unknown2
Cindy Ayu PrasasiAffiliation unknown2
Dwi Ajias PramasariAffiliation unknown2
Titi KalimaAffiliation unknown2
Rohmah PariAffiliation unknown2
DjarwantoAffiliation unknown2
Listya Mustika DewiAffiliation unknown2
Raden Gunawan Hadi RahmantoAffiliation unknown2
Dyah Ayu AgustiningrumAffiliation unknown2
Imran Arra’d SofiantoAffiliation unknown2
Adik BahanawanAffiliation unknown2
Dimas TriwibowoAffiliation unknown2
Teguh DarmawanAffiliation unknown2
Martitah MartitahState University of Semarang1
Eko MukmintoState University of Semarang1
Bayangsari WedhatamiState University of Semarang1
Danu IbrahimAffiliation unknown1
Julinar Tyara Maharani PasaribuAffiliation unknown1
Aqila Acyuta EndrosavaAffiliation unknown1
Ubaidillah KamalAffiliation unknown1

Affiliations come from OpenAlex; journal OAI-PMH metadata carries none. Authors without an OpenAlex ID are matched by name, which can merge or split people.

Metadata source: OAI-PMH (metadata jurnal) https://journal.unnes.ac.id/journals/snh/oai, first harvested 6 Nov 2026, last seen 8 Nov 2026.
Original metadata (oai_dc) 
<oai_dc:dc xmlns="http://www.openarchives.org/OAI/2.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:oai_dc="http://www.openarchives.org/OAI/2.0/oai_dc/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.openarchives.org/OAI/2.0/oai_dc/  http://www.openarchives.org/OAI/2.0/oai_dc.xsd">
	<dc:title xml:lang="en">Legal Protection for Biznet Customers for Data Leak from the Perspective of Law Number 27 of 2022</dc:title>
	<dc:creator xml:lang="en">Pertiwi, Romadona Putri </dc:creator>
	<dc:creator xml:lang="en">Ratih Damayanti</dc:creator>
	<dc:subject xml:lang="en">Legal Protection</dc:subject>
	<dc:subject xml:lang="en">Personal Data</dc:subject>
	<dc:subject xml:lang="en">Cybercrime</dc:subject>
	<dc:description xml:lang="en">The incident of PT Biznet Networks' data leak in March 2024 which impacted more than 380,000 customer data became the starting point of this study. This study aims to analyze two main problems: (1) legal protection and Biznet's responsibility for the leakage of customers' personal data based on Law Number 27 of 2022 concerning Personal Data Protection; and (2) critical evaluation of the Personal Data Protection Law in the case of Biznet data leak. This study applies a normative legal approach, supported by a regulatory analysis and a conceptual perspective. The findings of the study reveal that Biznet customers are positioned as Personal Data Subjects who receive layered protection from the Personal Data Protection Law, Consumer Protection Law, and Civil Code. Preventive protection is realized through a series of obligations imposed on data controllers, while repressive protection is available through three cumulative channels: administrative, civil, and criminal. Biznet is juridically positioned as the Personal Data Controller who bears the burden of reverse proof and non-delegable liability. The effectiveness of this legal framework is still constrained by the lack of independent supervisory institutions as mandated.</dc:description>
	<dc:publisher xml:lang="en">Universitas Negeri Semarang</dc:publisher>
	<dc:date>2026-03-06</dc:date>
	<dc:type>info:eu-repo/semantics/article</dc:type>
	<dc:type>info:eu-repo/semantics/publishedVersion</dc:type>
	<dc:format>application/pdf</dc:format>
	<dc:identifier>https://journal.unnes.ac.id/journals/snh/article/view/47393</dc:identifier>
	<dc:identifier>10.15294/lrrq.v12i4.47393</dc:identifier>
	<dc:source xml:lang="en">Law Research Review Quarterly; Vol. 12 No. 4 (2026): Articles in Press; 2105-2129</dc:source>
	<dc:source>2716-3415</dc:source>
	<dc:source>10.15294/lrrq.v12i4</dc:source>
	<dc:language>eng</dc:language>
	<dc:relation>https://journal.unnes.ac.id/journals/snh/article/view/47393/9550</dc:relation>
	<dc:rights xml:lang="en">Copyright (c) 2026 Law Research Review Quarterly</dc:rights>
</oai_dc:dc>