Balancing Privacy and Digital Security: A Transnational Approach to International Data Protection Law: Balancing Privacy and Digital Security: A Transnational Approach to International Data Protection Law

Riko Nugraha; Yuhelson Yuhelson; Tubagus Achmad  Doradjat

doi:10.56107/penalaw.v4i1.288

Authors

Riko Nugraha Doctor of Law Studies Program, Postgraduate Program - Jayabaya University, Indonesia
Yuhelson Yuhelson Doctor of Law Studies Program, Postgraduate Program - Jayabaya University, Indonesia
Tubagus Achmad Doradjat Rajamangala University Of Technology Krungthep, Thailand

DOI:

https://doi.org/10.56107/penalaw.v4i1.288

Keywords:

Transnational Data Governance; Privacy and Security; Digital Prudential Principles; Global Legal Interoperability; Data Protection

Abstract

The growing tension between privacy rights and national security interests in the digital age points to a normative crisis in global data governance. While the European Union has adopted a rights-based approach such as the General Data Protection Regulation, many other jurisdictions have instead adopted sectoral or security-based models that widen international legal fragmentation. This article analyzes how transnational legal instruments—particularly Convention 108+, the APEC CBPR system, and OECD guidelines—can serve as a normative bridge in reconciling these differing regimes. Using a comparative-normative legal research method, this study proposes the concept of “digital precautionary principles” as a new paradigm for balancing individual privacy with legitimate security needs. The research highlights the limitations of soft law in ensuring cross-border accountability and emphasizes the importance of a principle-based harmonization approach. Conceptually, this article expands the normative framework in transnational data protection law and practically provides policy guidance for developing countries in building fair and adaptive legal infrastructure for data protection. In the midst of increasingly intensive global interconnectedness, privacy protection that does not sacrifice collective security can only be achieved through anticipatory, interoperable, and rights-based global norms.

References

Albi, A. (2022). A Paradigm Shift in the Role of Courts? Disappearance of Judicial Review through Mutual Trust and other Neofunctionalist Tenets of EU Law. Juridica International, 31. https://doi.org/10.12697/ji.2022.31.01

Bennett, C. J. (2018). The European General Data Protection Regulation: An instrument for the globalization of privacy standards? In Information Polity (Vol. 23, Issue 2). https://doi.org/10.3233/IP-180002

Boyne, S. M. (2018). Data Protection in the United States. American Journal of Comparative Law, 66. https://doi.org/10.1093/ajcl/avy016

Brkan, M. (2019). The essence of the fundamental rights to privacy and data protection: Finding the way through the maze of the CJEU’s constitutional reasoning. In German Law Journal (Vol. 20, Issue 6). https://doi.org/10.1017/glj.2019.66

Buchan, R., & Lubin, A. (2023). The Rights to Privacy and Data Protection in Times of Armed Conflict. International Review of the Red Cross, 105(923). https://doi.org/10.1017/S1816383123000103

Clark, I. (2016). The digital divide in the post- Snowden era. Journal of Radical Librarianship, 2(2016).

Clark, M. (2024). Consumer Privacy and the Dobbs Disruption. SSRN Electronic Journal. https://doi.org/10.2139/ssrn.4741909

de Gregorio, G., & Dunn, P. (2022). The European Risk-Based Approaches: Connecting Constitutional Dots Inthe Digital Age. Common Market Law Review, 59(2). https://doi.org/10.54648/cola2022032

Di Salvo, P. (2019). From Snowden to Cambridge analytica: An overview of whistleblowing cases as scandals. In The Routledge Companion to Media and Scandal.

ElBaih, M. (2023). The Role of Privacy Regulations in AI Development (A Discussion of the Ways in Which Privacy Regulations Can Shape the Development of AI). SSRN Electronic Journal. https://doi.org/10.2139/ssrn.4589207

Fahey, E. (2018). Introduction: Institutionalisation Beyond the Nation State: New Paradigms? Transatlantic Relations: Data, Privacy and Trade Law. SSRN Electronic Journal. https://doi.org/10.2139/ssrn.3186123

Gill, P. (2009). Security intelligence and human rights: Illuminating the ‘Heart of Darkness’? Intelligence and National Security, 24(1). https://doi.org/10.1080/02684520902756929

Hapriyanto, A. R. (2023). The Urgency of Adopting Regulations on Artificial Intelligence Utilization to Enhance Personal Data Protection in Indonesia. Asian Journal of Engineering, Social and Health, 2(12). https://doi.org/10.46799/ajesh.v2i12.179

Harnowo, T. (2022). Law as Technological Control of the Infringement of Intellectual Property Rights in the Digital Era. Corporate and Trade Law Review, 2(1). https://doi.org/10.21632/ctlr.2.1.65-79

Hoofnagle, C. J., Sloot, B. van der, & Borgesius, F. Z. (2019). The European Union general data protection regulation: What it is and what it means. Information and Communications Technology Law, 28(1). https://doi.org/10.1080/13600834.2019.1573501

Judijanto, L., Solapari, N., & Putra, I. (2024). An Analysis of the Gap Between Data Protection Regulations and Privacy Rights Implementation in Indonesia. The Easta Journal Law and Human Rights, 3(01), 20–29. https://doi.org/10.58812/eslhr.v3i01.351

Kalin, R. P. (2024). Towards Reconciling Digital Trade and Data Privacy (pp. 287–316). https://doi.org/10.1007/978-3-031-73857-9_6

Khadzhiradieva, S., Bezverkhniuk, B., Nazarenko, O., Bazyka, S., & Dotsenko, T. (2024). Personal data protection: Between human rights protection and national security. Social Legal Studios, 7(3), 245–256. https://doi.org/10.32518/sals3.2024.245

Kovalenko, Y. (2022). The Right To Privacy And Protection Of Personal Data: Emerging Trends And Implications For Development In Jurisprudence Of European Court Of Human Rights. Masaryk University Journal of Law and Technology, 16(1). https://doi.org/10.5817/MUJLT2022-1-2

Kunelius, R., & Russell, A. (2019). Surveillance scandals and the systemic crisis of the public. In The Routledge Companion to Media and Scandal. https://doi.org/10.4324/9781351173001-30

Laurer, M., & Seidl, T. (2021). Regulating the European Data-Driven Economy: A Case Study on the General Data Protection Regulation. Policy and Internet, 13(2). https://doi.org/10.1002/poi3.246

Li, D., Landström, A., Fast-Berglund, Å., & Almström, P. (2019). Human-centred dissemination of data, information and knowledge in industry 4.0. Procedia CIRP, 84. https://doi.org/10.1016/j.procir.2019.04.261

Lucas, H. C., Agarwal, R., Clemons, E. K., El Sawy, O. A., & Weber, B. (2013). Impactful research on transformational information technology: An opportunity to inform new audiences. In MIS Quarterly: Management Information Systems (Vol. 37, Issue 2). https://doi.org/10.25300/misq/2013/37.2.03

Malgieri, G., & Custers, B. (2018). Pricing privacy – the right to know the value of your personal data. Computer Law and Security Review, 34(2). https://doi.org/10.1016/j.clsr.2017.08.006

Markussen, H. (2022). After Cambridge Analytica: Rethinking Surveillance in the Age of (Com)Modification. In Problematising Intelligence Studies: Towards a New Research Agenda. https://doi.org/10.4324/9781003205463-13

Mayasari, H. (2023). A examination on personal data protection in metaverse technology in Indonesia: a human rights perspective. Journal of Law, Environmental and Justice, 1(1). https://doi.org/10.62264/jlej.v1i1.4

Mazur, J., & Słok-Wódkowska, M. (2022). Access to Information and Data in International Law How to Find a Path Forward from Human Rights-Oriented and Market-Oriented Approach? Nordic Journal of International Law, 91(2). https://doi.org/10.1163/15718107-91020004

Negara, T. A. S. (2023). Normative Legal Research in Indonesia: Its Originis and Approaches. Audito Comparative Law Journal (ACLJ), 4(1). https://doi.org/10.22219/aclj.v4i1.24855

Ramadhan, K. R., & Wijaya, C. (2022). The Challenges of Personal Data Protection Policy in Indonesia: Lesson learned from the European Union, Singapore, and Malaysia. Technium Social Sciences Journal, 36. https://doi.org/10.47577/tssj.v36i1.7442

Rizal, M., Rosadi, S. D., & Taryana, A. (2024). Legal Framework for consumer Data Protection For Digital Business SMES in Indonesia. Journal of Law and Sustainable Development, 12(1). https://doi.org/10.55908/sdgs.v12i1.2809

Seun Solomon Bakare, Adekunle Oyeyemi Adeniyi, Chidiogo Uzoamaka Akpuokwe, & Nkechi Emmanuella Eneh. (2024). Data Privacy Laws And Compliance: A Comparative Review Of The EU GDPR and USA Regulations. Computer Science & IT Research Journal, 5(3). https://doi.org/10.51594/csitrj.v5i3.859

Smits, J. M. (2015). What is Legal Doctrine? On the Aims and Methods of Legal-Dogmatic Research. SSRN Electronic Journal. https://doi.org/10.2139/ssrn.2644088

Stratford, J. S., & Stratford, J. (1999). Data Protection and Privacy in the United States and Europe. IASSIST Quarterly, 22(3). https://doi.org/10.29173/iq80

Sullivan, C. (2019). EU GDPR or APEC CBPR? A comparative analysis of the approach of the EU and APEC to cross border data transfers and protection of personal data in the IoT era. Computer Law and Security Review, 35(4). https://doi.org/10.1016/j.clsr.2019.05.004

Tzanou, M. (2018). The EU–US Data Privacy and Counterterrorism Agreements: What Lessons for Transatlantic Institutionalisation? In Studies in European Economic Law and Regulation (Vol. 10). https://doi.org/10.1007/978-3-319-50221-2_4

Tzanou, M. (2021). Schrems I and Schrems II: Assessing the Case for the Extraterritoriality of EU Fundamental Rights. In Data Protection Beyond Borders: Transatlantic Perspectives on Extraterritoriality and Sovereignty. https://doi.org/10.5040/9781509940691.ch-007

Werner, L., Puta, C., Chilalika, T., Walker Hyde, S., Cooper, H., Goertz, H., Rivera Hildebrand, M., Bernadotte, C., & Kapnick, V. (2023). How digital transformation can accelerate data use in health systems. Frontiers in Public Health, 11. https://doi.org/10.3389/fpubh.2023.1106548

Balancing Privacy and Digital Security: A Transnational Approach to International Data Protection Law