Personal data is an important asset for individuals and organizations that must be protected. In this digital era, personal data often becomes an easy target for irresponsible individuals and organizations. Therefore, it is essential for people to understand what personal data is, the rules governing personal data in Indonesia, and the risks of deviations from established rules, standards, or norms regarding the handling of personal data. 

According to Personal Data Protection (PDP) Act No. 27 of 2022, as the primary regulation on personal data protection, personal data is defined as any information about an individual that can be identified directly or indirectly from that data, either alone or in combination with other data. 

Data categories under this Act are divided into two categories, General Personal Data and Sensitive Personal Data. General Personal Data includes non-sensitive information such as names, addresses, dates of birth, and telephone numbers. Sensitive Personal Data requires additional protection and includes information such as health data, biometric data, genetic data, and financial data.