Personal Data Protection Factors on the Strengthening of IT Governance Framework Implementation

Information technology is an essential part of people's lives and cultural awareness, playing a beneficial role in providing services, improving quality of life, and improving communication. Therefore, organizations or companies in Indonesia need to implement the Personal Data Protection Law (PDP Law) as soon as possible to protect their user data from the risk of data leaks. This article aims to be the reference for evaluating the implementation of personal data protection regulations, strengthening IT governance, and further study. This research uses literature studies regarding IT governance framework and personal data protection. The results indicate seven regulatory implementation factors: data disclosure, user awareness, data owner, data protection officer, flow data, data security, and accountability and governance. Risk management, compliance, alignment with business strategy, and assurance are the four aspects of strengthening the IT governance framework. These aspects can serve as references for enhancing the governance framework in information technology.