Personal Data Protection Framework for Web Developers and API Providers under UU PDP

The growth of technology has caused many organizations to migrate their systems from conventional to online systems. The large number of data leaks cases need to be carefully considered in the system development process in Indonesia, especially since the release of the Personal Data Protection Law (UU PDP) at the end of 2022. This regulation requires data controllers to be responsible for protecting the personal data they manage. System security is not enough in carrying out data processing to comply with the UU PDP. The main goal of this research is to propose a framework that can be used by web developers and API providers. This research uses an analytical study method that involves consultation with expert who have an understanding about UU PDP and learning from the other research aimed at complying with the European Union - General Data Protection Regulation (EU-GDPR). The validation results show that experts in the field of personal data protection agree with the proposed framework, with several suggestions provided to make the proposed framework more targeted.