Gap Analysis Between Personal Data Protection Law and Regional Government Regulations in Indonesia for API Service Providers

The rapid advancement of technology has significantly enhanced efficiency in human endeavors, particularly in information exchange. Many organizations opt for Application Programming Interfaces (APIs) as a means to share data, as they offer streamlined storage and processing capabilities. However, amidst these conveniences, ensuring data security poses a challenge for API developers, especially in terms of privacy protection, which extends beyond API security measures. With Indonesia recently enacting legislation governing personal data protection, significant implications are anticipated for existing API regulations. This research aims to analyze the disparity between regional government regulations concerning electronic-based government systems and the new personal data protection law in Indonesia. The study seeks to identify the existing compliance levels and identify areas that require further attention and enhancement.