A Comparative Legal Analysis on Personal Data Protection Laws in Selected ASEAN Countries

Analisis Perundangan Perbandingan Undang-undang Perlindungan Data Peribadi di Negara-negara ASEAN


  • Nawal Sholehuddin Faculty of Syariah and Law, Selangor Islamic University
  • Surianom Miskam Faculty of Syariah and Law, Selangor Islamic University
  • Farah Mohd Shahwahid Faculty of Syariah and Law, Selangor Islamic University
  • Tuan Nurhafiza Raja Abdul Aziz Faculty of Syariah and Law, Selangor Islamic University
  • Naqibah Mansor Faculty of Syariah and Law, Selangor Islamic University




ASEAN, Data Processing , Laws , Personal Data Protection


Personal data has become susceptible to data breaches following the drastic rise in data processing worldwide. Consequently, data protection issues have been addressed using personal data protection (PDP) laws. The current article compared the PDP regulations in Malaysia, Indonesia, Singapore, and the Philippines by assessing the salient features of every law on PDP components via content analysis. As law enforcement varies based on each nation’s requirements and situations, their similarities and differences were highlighted in the research outcome. Findings from this study show that each country is committed to ensure the protection of personal data and does so by using ways that most suit the needs and legal requirements of their respective countries.

Data peribadi semakin mudah terdedah kepada pelanggaran data berikutan peningkatan drastik dalam pemprosesan data di seluruh dunia. Isu perlindungan data peribadi telah ditangani dengan pelaksanaan undang-undang perlidungan data peribadi. Artikel ini menganalisis perbandingan undang-undang perlindungan data peribadi di Malaysia, Indonesia, Singapura dan Filipina dengan menilai ciri-ciri unik setiap undang-undang dengan mengguna pakai kaedah analisis kandungan. Memandangkan penguatkuasaan undang-undang berbeza berdasarkan kepada kehendak setiap negara, persamaan dan perbezaan antara negara-negara ini dibincangkan dalam kajian ini dengan terperinci. Dapatan kajian menunjukkan bahwa setiap negara yang dikaji memandang serius komitmen keperluan perlindungan data peribadi dan menggunakan cara yang paling sesuai mengikut keperluan dan memenuhi syarat-syarat perundangan negara mereka.


Download data is not yet available.


Ameed, M., & Natgunanathan. (2016). Protection of big data privacy. IEEE access, 1821-1834.

Bakos, Y, Marotta-Wurgler, F. & Trossen, D.R. (2018). Does Anyone Read the Fine Print? Consumer Attention to Standard Form Contracts. Journal of Legal Studies, 43(1).

Bigg, C., Lee, Y.L. & Cho, J.Q. (2023). Data Protection Laws of the World: Singapore. DLA Piper. Last modified 16 January 2023.

Chia, J. (2023). Data Protection Laws of the World: Malaysia. DLA Piper. Last modified 10 January 2023.

Fadhilah, A.G., Syahirah, M.S., Maizatul Akmar, M.R., Nurulhuda, A.R. & Emir, H.A.S. (2020). An Overview of the Personal Data Protection Act 2010 (PDPA):

Problems and Solutions. Global Business and Management Research: An International Journal, 12(4), 559-564.

Flores, R. T. G., & Ching, M. R. D. (2018). Philippine SUCs compliance performance on RA 10173: a case study on Bukidnon State University. In Proceedings of the 2nd International Conference on E-commerce, E-Business and E-Government (pp. 74-78).

Interpol (2021). Asean Cyberthreat Assessment 2021: Key Cyberthreat Trends Outlook From The Asean Cybercrime Operations Desk. Singapore: Napier Road.

Islam, M.T., & Karim, M. T. (2019). A Brief Historical Account of Global Data Privacy Regulations and the Lessons for Malaysia. Journal of History Department, University of Malaya, 28(2), 169-186.

Jayanti, C. S. (2022). The Issues Of Data Protection Against Leaking Of Personal Data In Social Security Health Services (A Comparison Between Indonesia And Other Countries Regulations). International Journal of Business, Economics and Law, 26.

Jin, W., Aguja, S. E., & Prudente, M. S. (2019, January). Comparing the differences of using mobile devices for learning between Filipino schools and Chinese schools in the Philippines. In Proceedings of the 10th International Conference on E-Education, E-Business, E-Management and E-Learning (pp. 216-220).

Kedzior, M. (2021). The Right to Data Protection and the COVID-19 Pandemic: The European

Approach. ERA Forum, 533–543.

King Kay, C.B.O. (2022). Data Protection Laws of the World: Philippines. DLA Piper. Last modified 29 December 2022.

Krippendorff, K., & Bock, M. A. (2008). The content analysis reader. Thousand Oaks, CA: Sage.

Lago, C. (2020). The Biggest Data Breaches in Southeast Asia. CSO Online (18 January 2020).

Law, S. (2017). At the crossroads of consumer protection, data protection and private international law: Some remarks on Verein für Konsumenteninformation v Amazon EU. European Law Review, 42 (5), 751-766.

Mangku, D. G. S., Yuliartini, N. P. R., Suastika, I. N., & Wirawan, I. G. M. A. S. (2021). The Personal Data Protection of Internet Users in Indonesia. Journal of Southwest Jiaotong University, 56(1).

Moore, D. S., & McCabe, G. P. (2005). Introduction to the Practice of Statistics (5th ed.). New York, NY: W.H. Freeman & Company.

Nabila, Marsha. (Dailysocial.id). Survei Mastel-APJII: Pengguna Internet Butuh Campur Tangan Pemerintah Lindungi Privasi dan Data Pribadi (01 Desember 2017) https://dailysocial.id/post/survei-mastel-apjii-pengguna-internet-butuh-campur-tangan-pemerintah-lindungi-privasi-dan-data-pribadi

National Privacy Commission Toolkit: A Guide for Management and Data Protection Officers: 2017.

Nugroho, A. A., Winanti, A., & Surahmad, S. (2020). Personal Data Protection in Indonesia: Legal Perspective. International Journal of Multicultural and Multireligious Understanding, 7(7), 183-189.

Pitogo, V., & Ching, M. (2018). Understanding Philippine national agency's commitment on Data Privacy Act of 2012: A case study perspective. ACM International Conference Proceeding Series https://doi.org/10.1145/3234781.3234788.

Presbitero, J. V., & Ching, M. R. D. (2018). Assessing compliance of Philippine state universities to the Data Privacy Act of 2012: The case of Caraga State University. In Proceedings of the 2nd International Conference on E-commerce, E-Business and E-Government (pp. 90-94).

Privacy International. (2013). A Guide for Policy Engagement: Part 1 Data Protection Explained.

Ramadhan, K. R., & Wijaya, C. (2022). The Challenges of Personal Data Protection Policy in Indonesia: Lesson learned from the European Union, Singapore, and Malaysia. Technium Soc. Sci. J., 36, 18.

Reynaldi, F., & Tifana, N. (2020). Urgensi Perlindungan Data Pribadi dalam Menjamin Hak Privasi: Sebuah Telaah RUU Perlindungan Data Pribadi. Universitas Padjajaran Press.

Riyadi, G. (2021). Data Privacy in the Indonesian Personal Data Protection Legislation (No. 7). Policy Brief.

Rosadi, S. (2018). Protecting Privacy On Personal Data In Digital Economic Era: Legal Framework In Indonesia. Brawijaya Law Journal, 5(1), 143-157.

Sargunaraj, N. (2020). Personal Data Protection in ASEAN. ZICO Law: Asean Insiders Series, September 2020.

Setiawati, D., Hakim, H. A., & Yoga, F. A. H. (2020). Optimizing Personal Data Protection in Indonesia: Lesson Learned from China, South Korea, and Singapore. Indonesian Comparative Law Review, 2(2), 95-109.

Sholikhah, V. H., Sejati, N. R. F. F., & Shabitah, D. (2021). Personal Data Protection Authority: Comparative Study between Indonesia, United Kingdom, and Malaysia. Indonesian Scholars Scientific Summit Taiwan Proceeding, 3, 54-63.

Sudarwanto, A. S., & Kharisma, D. B. B. (2022). Comparative study of personal data protection regulations in Indonesia, Hong Kong and Malaysia. Journal of Financial Crime, 29(4), 1443-1457.

Sureani, N. B. N., Qurni, A. S. B. A., Azman, A. H. B., Othman, M. B. B., & Zahari, H. S. B. (2021). The Adequacy of Data Protection Laws in Protecting Personal Data in Malaysia. Malaysian Journal of Social Sciences and Humanities (MJSSH), 6(10), 488-495.

Tanate-Lazo, R. J. C., & Cabonero, D. A. (2021). Philippine Data Privacy Law: Is it Implemented in a Private University Library, or Not?. Library Philosophy and Practice, 1-26.

Tham, Y.M., Tan, I. & Zhang, T. (2014). Chapter 16: Singapore in The Privacy, Data Protection and Cybersecurity Law Review. Great Britain: Encompass Print Solutions, Derbyshire.

Thaher, I. (2022a). Politik Hukum: Perlindungan Data Pribadi pada Aplikasi Peduli Lindungi di Indonesia. Jurnal Pendidikan Tambusai, 6(1), 1065–1072.

Thaher, I. (2022b). Legal Politics: Personal Data Protection in Peduli Protect Applications in Indonesia. Journal Research of Social, Science, Economics, and Management, 1(8), 1195-1206.

Tumbuan, J. & Ngantung, L.S. (2022). Data Protection Laws of the World: Indonesia. DLA Piper. Last modified 23 December 2022.

Yap, M. Y. (2019. Nearly 45,000 University Malaya login IDs and passwords were leaked by an anonymous hacker. Mashable SE Asia (19 October 2019).

Yip, M. (2018). Protecting consumers' personal data in the digital world: Challenges and changes. Personal Data Protection Digest. [2018], 104-117. Research Collection School Of Law. Available at: https://ink.library.smu.edu.sg/sol_research/2904

Yunus, R. (2019). Almost 200% Increase in Data Breach Attacks since 2018. The Malaysian Reserve (17 October 2019).

Zwitter, A., Gstrein, O. J. (2020). Big Data, Privacy and COVID-19 – Learning from Humanitarian Expertise in Data Protection. Journal of International Humanitarian Action, 5(4).



How to Cite

Sholehuddin, N., Miskam, S., Mohd Shahwahid , F. ., Raja Abdul Aziz , T. N. ., & Mansor, N. (2024). A Comparative Legal Analysis on Personal Data Protection Laws in Selected ASEAN Countries: Analisis Perundangan Perbandingan Undang-undang Perlindungan Data Peribadi di Negara-negara ASEAN . Journal of Muwafaqat, 7(1), 23–38. https://doi.org/10.53840/muwafaqat.v7i1.166