The Enactment of the Indonesian Personal Data Protection Law (Law Number 27 of 2022 concerning Personal Data Protection, further referred to as PDP Law) proves the acknowledgement that the personal data protection is part of the enforcement of human rights concerning the protection of individual privacy. It also evidences the state's duties to ensure the people’s rights, which are ‘to respect’, ‘to fulfil’, and ‘to protect’.