Public Perceptions of Personal Data Security in Digital Service Utilization in Indonesia and Thailand: A Comparative Analysis of Regulatory Frameworks, Risks, and User Trust

Ar Rahiim Innash; Arista Candra Irawati; Vicentius Simon Suyanto; Sudijono Sastroatmodjo; Prattana Srisuk

doi:10.59890/ijasr.v4i8.292

Authors

Ar Rahiim Innash Universitas Ngudi Waluyo
Arista Candra Irawati Universitas Ngudi Waluyo
Vicentius Simon Suyanto Universitas Ngudi Waluyo
Sudijono Sastroatmodjo Universitas Ngudi Waluyo
Prattana Srisuk Thai Global Business Administration College

DOI:

https://doi.org/10.59890/ijasr.v4i8.292

Keywords:

Personal Data, Public Perception, Digital Security, Indonesia PDP Law, Thailand PDPA, Digital Services

Abstract

Digital transformation in Southeast Asia has increased public reliance on digital services while simultaneously heightening the risk of personal data breaches. This article analyzes public perceptions of data security in Indonesia and Thailand through a comparative approach covering regulations, recent incidents, and user trust frameworks. Indonesia enacted Law No. 27 of 2022 on Personal Data Protection (PDP), while Thailand has implemented the Personal Data Protection Act (PDPA) since 2022. Public perception in both countries is shaped by three key factors: digital literacy, experiences with data breaches, and the effectiveness of law enforcement. Incidents such as the hacking of the Temporary National Data Center and tax data breaches in Indonesia have heightened public concern. Conversely, the imposition of administrative fines in Thailand demonstrates stronger enforcement of accountability. Public trust is heavily influenced by transparency, incident handling, and consistent law enforcement

References

APJII, & Indonesia), (Asosiasi Penyelenggara Jasa Internet. (2024). APJII Jumlah Pengguna Internet Indonesia Tembus 221 Juta Orang. Https://Apjii.or.Id/Berita/d/Apjii-Jumlah-Pengguna-Internet-Indonesia-Tembus-221-Juta-Orang. https://apjii.or.id/berita/d/apjii-jumlah-pengguna-internet-indonesia-tembus-221-juta-orang

ASIA-PACIFIC. (2025). 5 Major Personal Data Breach Events In Thailand in 2024-A Summary Of The Risks And Impacts Organizations Face. Saraburi Campus. https://www.apiu.edu/scamawareness/pdp-authority-thailand/

Company, B. &. (n.d.). e-Conomy SEA 2024. https://www.bain.com/insights/e-conomy-sea-2024/

Davis, F. D. (1989). Perceived Usefulness, Perceived Ease of Use, and User Acceptance of Information Technology. MISQ, 13(3), 319–340. https://misq.umn.edu/misq/article-abstract/13/3/319/191/Perceived-Usefulness-Perceived-Ease-of-Use-and?redirectedFrom=fulltext

Deradjat, A., Timur, M., Santoso, N. C., Kaur, D. P., & Khovey, E. (2025). Data Protection in Indonesia : Overview. Reuters, Thomson, 27, 1–24.

Dienlin, T. (2023). Privacy Calculus : Theory , studies , and new perspectives. The Routledge Handbook of Privacy and Social Media. Routledge.

Katadata.co.id. (2024). Tujuh Kasus Hacker dan Data Bocor 2024, Ada yang Sebabkan Layanan Publik Lumpuh Artikel ini telah tayang di Katadata.co.id dengan judul “Tujuh Kasus Hacker dan Data Bocor 2024, Ada yang Sebabkan Layanan Publik Lumpuh” , https://katadata.co.id/digital/tekn. https://katadata.co.id/digital/teknologi/67738eeb9e7d5/tujuh-kasus-hacker-dan-data-bocor-2024-ada-yang-sebabkan-layanan-publik-lumpuh

Kemp, S. (2025a). Digital 2025: Indonesia. DataReportal. https://datareportal.com/reports/digital-2025-indonesia

Kemp, S. (2025b). Digital 2025: Thailand. DataReportal. https://datareportal.com/reports/digital-2025-thailand

Lalitkomon, N., Lamsam, R., & Somya, W. (2024). Thailand Releases Master Plan for Personal Data Protection. Tilleke & Gibbins. https://www.tilleke.com/insights/thailand-releases-master-plan-for-personal-data-protection/

Li, H., Sarathy, R., & Xu, H. (2010). Understanding situational online information disclosure as a privacy calculus Understanding situational online information disclosure as a privacy calculus. Journal Of Computer Information Systems, 1–29.

Masagee, S., & Boonnark, C. (2026). Data Protection Laws of the World. In DLA PIPER.

Mondaq. (n.d.). Landmark Fine Imposed Under Thailand’s Personal Data Protection Act. https://www.mondaq.com/privacy-protection/1509140/landmark-fine-imposed-under-thailands-personal-data-protection-act

Na, T. R. (2022). Thailand - Personal Data Protection (2562). https://regulations.ai/regulations/thailand-2019-5-personal-data-protection-act-pdpa

Official Emblem of Royal Command] Personal Data Protection Act, B.E. 2562 (2019), 1 (2019).

PIPER, D. (2026a). Data protection laws in Indonesia. https://www.dlapiperdataprotection.com/?t=law&c=ID

PIPER, D. (2026b). Data protection laws in Thailand. DLA PIPER. https://www.dlapiperdataprotection.com/?t=law&c=TH

Raidi. (2024). Indonesia Personal Data Protection Law Takes Full Effect on October 17 2024. Indonesial Sentinel. https://indonesiasentinel.com/indonesia-personal-data-protection-law-takes-full-effect-on-october-17-2024/

Recording, L. (2026). Indonesia Data Privacy Laws: Complete UU PDP Compliance Guide (2026). https://www.recordinglaw.com/world-laws/world-data-privacy-laws/indonesia-data-privacy-laws/

Somwaiya, K., Aroonpakmongkol, W., & Ua-areetham, U. (2024). Thailand First Administrative Fine for Data Breach: An Analysis of Law and Practice. LAWPLUSUPDATE, 000(September), 1–2.

Team, D. (2024). Digital 2024: Thailand. https://datareportal.com/reports/digital-2024-thailand

TEMPO. (2025). Polemik Data Pribadi: 5 Kasus Kebocoran Data di Indonesia Selama 2023-2024. https://www.tempo.co/digital/polemik-data-pribadi-5-kasus-kebocoran-data-di-indonesia-selama-2023-2024-2052924

Undang-Undang Republik Indonesia Nomor 27 Tahun 2022 Tentang Pelindungan Data Pribadi (2022).