Restructuring Legal Principles of Personal Data Protection to Respond to Big Data Characteristics
Keywords:
Data privacy, big data analytics, legal framework, normative reconstruction, algorithmic accountability, consent mechanics, data governance.Abstract
This doctrinal legal research examines the legal protection of data privacy within the big data ecosystem. The analysis reveals that conventional legal constructs, which rely on individual consent and purpose limitation, face fundamental obsolescence when confronted with the massive volume, high velocity, and wide variety of modern data processing. These characteristics render notice-and-consent mechanisms hollow and fragment accountability across multiple actors in the data chain. This study proposes a reconstructed normative framework that reinterpretates established Fair Information Practice Principles and introduces five supplementary principles proportionality, precaution, algorithmic fairness, collective data governance, and enhanced portability. The proposed framework shifts legal protection from a static ex-ante control model toward a dynamic, risk-based oversight regime that monitors continuous data flows and usage. Effective legal protection does not obstruct innovation; rather, it ensures that data-driven development proceeds within boundaries that respect human dignity and individual autonomy. This research contributes to legal scholarship by bridging the gap between individual privacy rights and systemic data processing realities. For policymakers, the findings offer clear guidance for drafting legislation that incorporates accountability mechanisms and technical audit provisions. The study concludes that a legal transformation is imperative, requiring not mere amendment but a fundamental reorientation of how law perceives and regulates personal data. Regulators must develop technical expertise to audit algorithms, while businesses must embed privacy principles into system architecture from the outset. This research thus provides a comprehensive roadmap for building a responsive and just data protection regime.
References
Abdeldayem, A. M. (2023). The Transformative Power of Big Data: Leveraging Insights for Economic Growth, Environmental Preservation, and Societal Well-being. International Journal of Green Management and Business Studies, 3(2). https://doi.org/10.56830/ijgmbs12202303
Ali, R., & Darmawan, D. (2023). Big Data Management Optimization for Managerial Decision Making and Business Strategy. Journal of Social Science Studies, 3(2), 139-144.
Aryanto, E. A., Darmawan, D., & Irfan, M. (2024). Business Legal Framework and Challenges in Implementing Social Responsibility Towards Local Communities in Large Investment Projects. Journal of Social Science Studies, 4(1), 129-136.
Aura, A., Priowirjanto, E. S., & Dewi, C. T. I. (2024). Privacy Protection Guarantee for Data Hacking Victims According to Indonesian Law. Padjadjaran Journal of International Law, 8(2). https://doi.org/10.23920/pjil.v8i2.1823
Aziz, A., Darmawan, D., Khayru, R. K., & Wibowo, A. S. (2023). Effectiveness of Personal Data Protection Regulation in Indonesia's Fintech Sector. Journal of Social Science Studies, 3(1), 23-28.
Bashori, B., Hardyansah, R., & Darmawan, D. (2024). Legal Analysis of Big Data and Analytics in Preventing Discrimination and Protecting Insurance Customers. Journal of Social Science Studies, 4(1), 185-192.
Batey, C. E. (2022). Big Data and Data Protection. In Research Handbook on Privacy and Data Protection Law. Edward Elgar Publishing. https://doi.org/10.4337/9781786438515.00024
Bruening, P. J., & Culnan, M. J. (2016). Through a Glass Darkly: From Privacy Notices to Effective Transparency. North Carolina Journal of Law & Technology, 17(4), 515.
Chynoweth, P. (2008). Legal Research. In A. Knight & L. Ruddock (Eds.), Advanced Research Methods in the Built Environment. Wiley-Blackwell.
Dai, Y. (2021). Data-Related Legislation and its Implications for a Country’s Competitiveness: The Perspective of the People’s Republic of China. Journal of Data Protection & Privacy, 4(2), 146-157. https://doi.org/10.69554/ommt2534
Essa, N. E., Mardikaningsih, R., & Ismail, A. B. (2024). Service Transformation Through Technology the Role of AI and Big Data in Service Science. Journal of Social Science Studies, 4(1), 193-200.
Fleckenstein, M., & Fellows, L. (2018). Big Data and Data Management. In Modern Data Strategy. Cham: Springer International Publishing. https://doi.org/10.1007/978-3-319-68993-7_2
Forgó, N., Hänold, S., & Schütze, B. (2017). The Principle of Purpose Limitation and Big Data. In New Technology, Big Data and the Law. Singapore: Springer Singapore. https://doi.org/10.1007/978-981-10-5038-1_2
Giannopoulou, A. (2020). Algorithmic Systems: The Consent is in the Detail?. Internet Policy Review, 9(1), 1-19. https://doi.org/10.14763/2020.1.1452
Grant, M. J., & Booth, A. (2009). A Typology of Reviews: An Analysis of 14 Review Types and Associated Methodologies. Health Information and Libraries Journal, 26(2), 91-108.
Hartana, P. C., Mardikaningsih, R., & Halizah, S. N. (2024). Legal Construction and Enforcement Challenges of Credit Card Data Hacking Crimes in E-Commerce Systems. Journal of Social Science Studies, 4(2), 503-516.
Junaidi, J., Hardyansah, R., & Putra, A. R. (2024). Business Dispute Resolution Through Arbitration and Mediation Within the National Legal Framework. Journal of Social Science Studies, 4(1), 423-436.
Karwati, K., Hardyansah, R., & Saktiawan, P. (2024). Legal Analysis of Open Banking and Bank Customer Data Privacy Rights in Indonesia. Journal of Social Science Studies, 4(1), 93-104.
Keskar, V., Yadav, J., & Kumar, A. (2021). Taxonomy of Data Inconsistencies in Big Data. 9(1), 353–363. https://doi.org/10.17762/ITII.V9I1.139
Laje, A., & Schmidt, K. (2024). The Right to Data Portability as a Personal Right. Laws, 13(4), 47–47. https://doi.org/10.3390/laws13040047
Lestari, E., & Rasji, R. (2024). Legal Study on Personal Data Protection Based on Indonesian Legislation. Awang Long Law Review, 6(2), 471–477. https://doi.org/10.56301/awl.v6i2.1206
Liu, Z. (2024). The Development and Challenges of Data Protection Laws. International Law Research, 13(1). https://doi.org/10.5539/ilr.v13n1p38
Mougdir, S. (2020). Artificial Intelligence in a Privacy-Concerned World: Automated Decision-Making and the GDPR. Journal of Data Protection & Privacy, 3(4), 393-402. https://doi.org/10.69554/bppn8465
Mujisulistyo, Y. F., Darmawan, D., & Dirgantara, F. (2024). Reconstruction of the Legal Mechanism for Consumer Rights Recovery Regarding Personal Data Leaks in the Financial Technology and E-Commerce Sectors in Indonesia. Journal of Social Science Studies, 4(1), 75-84.
Osean, R., Negara, D. S., & Putra, A. R. (2024). Digital Transformation in Manufacturing and Legal Aspects of Data Protection and Workers. Journal of Social Science Studies, 4(1), 21-32.
Ryan, P. (2019). Protecting Privacy in a World of Big Data. 85–100. https://doi.org/10.4324/9781351104845-11
Solove, D. J. (2008). Understanding Privacy. Harvard University Press.
Spanca, F., & Salihu, A. (2024, October). Unveiling the Consequences of Data Breaches: Risks, Impacts, and Mitigation in the Digital Age. In 2024 International Conference on Electrical, Communication and Computer Engineering (ICECCE). IEEE. https://doi.org/10.1109/icecce63537.2024.10823432
Talapina, E. V. (2023). Big Data and Human Rights: Toward Legal Regulation. Gosudarstvo i pravo, (7), 129-138. https://doi.org/10.31857/s102694520026812-4
Tene, O., & Polonetsky, J. (2012). Big Data for All: Privacy and User Control in the Age of Analytics. Northwestern Journal of Technology and Intellectual Property, 11(5), 239-273.
Vedder, A., & Naudts, L. (2017). Accountability for the Use of Algorithms in a Big Data Environment. International Review of Law, Computers & Technology, 31(2), 206–224. https://doi.org/10.1080/13600869.2017.1298547
