Bpjs Health Data Leak Becomes Alarm Of Finalization Of PDP Bill

ILLUSTRATION/UNSPLASH

JAKARTA - Members of Commission I of the House of Representatives regret the case of leaking personal data of Indonesian citizens again repeated. This time 279 million data including related bpjs health allegedly traded on internet forums.

"There have been very frequent leaks of personal data on the internet. Whether it is personal data in the private realm such as data in Tokopedia, Bukalapak, Lazada, as well as data in public agencies such as the leaking of COVID-19 patient data, election data in KPU, and the latest allegations of BPJS Health data," sukamta said, Friday, May 21.

According to him, the country's cyber resilience is very weak even though BPJS always maintains that the security of participants' data is guaranteed confidentiality. Plus the hackers and crackers have enough expertise that is constantly honed with technology that is constantly updated.

However, he continued, this is certainly a warning to the country because the leak of 279 million BPJS Health data is already very large, even the number is almost the same as the total population of Indonesia.

"This is an alarm for Indonesia," said the yogyakarta legislator.

The Deputy Chairman of the MCC Faction stressed that the government should immediately investigate the case in order to be clear what the source of the leak was and whether it was true that bpjs kesehatan website was successfully compromised or other information systems were hacked.

In addition, sukamta said, mitigation measures must also be taken so that the data that has been leaked is stopped from spreading and destroyed. The government, too, should have anticipation of the effects of the leaking of this data, whether after this there will be another 'attack' in cyberspace that could shake the country's cyber resilience.

"And there needs to be steps forward so that something like this doesn't happen again. This is important to underline because there are likely to be more cases of data leaks than ever before," Sukamta said.

One of the urgent steps to be taken, he continued, is the completion of the discussion of the Personal Data Protection Bill (PDP).

Sukamta admitted that the discussion is stagnant because there are differences of views in terms of determining the form of personal data protection authority, whether the institution is independent or managed by the Ministry of Communication and Information.

"The discussion was very tough there," he said.

However, sukamta added, it should be the case of the alleged data leak bpjs health is a slap for all, that the most appropriate form of authority is an independent agency.

"What if a public body that due to its negligence causes the failure of the Protection of personal data. It's strange then that public bodies punish fellow public bodies. This chapter must meet the agreement immediately, so that efforts to protect personal data can immediately have a strong legal umbrella against private bodies, communities including public bodies," said Sukamta.