Hackers Hacked Data, ELSAM Asks Police To Repair Security System

Executive Director of the Institute for Community Studies and Advocacy (ELSAM) Wahyudi Djafar. (ANTARA/Personal Documentation)

JAKARTA - Executive Director of the Institute for Community Studies and Advocacy (ELSAM) Wahyudi Djafar said the National Cyber and Crypto Agency (BSSN) and the Ministry of Communication and Informatics needed to immediately conduct a thorough investigation when handling cases of police data leakage.

"A thorough and accountable investigation is needed to determine the cause of the leak, the magnitude of the leak, the impact of the risk of the leak, and the mitigation steps that must be taken, including system improvements to prevent similar leaks," Wahyudi said in a statement received in Jakarta, Antara, Friday, November 19. .

He also asked the police to immediately take mitigation steps to ensure data leakage, including identifying the cause of data leakage.

In its capacity as data controller, the police must immediately give written notification to data subjects whose personal data is leaked or disclosed to the public.

"Moreover, in this case there are a number of sensitive data leaked, which has a higher and long-term risk for the data subject," he said.

In addition, Wahyudi is of the view that the police need to evaluate and audit the security system in processing personal data to prevent similar incidents from occurring.

"Learning from data leakage cases involving police institutions that include not only sensitive data, but also data related to law enforcement, the Personal Data Protection Law needs to properly regulate the level of protection (gravity of protection) for each type of personal data," said Wahyudi.

The incident of the Police data leak shows that Indonesia needs a comprehensive Personal Data Protection Law of good quality and can be implemented effectively through the presence of a strong and independent personal data protection authority, he said.

"In data processing (collection, storage, destruction) related to law enforcement, a higher security system must be implemented considering the high risk for the data subject," he said.