"An accountable investigative report is not only important for data controllers but also to ensure the fulfillment of the rights of data subjects, including the right for effective recovery," ELSAM said in a statement received here on Friday.
According to the institute, the investigation should be aimed at determining the cause of the leak, the magnitude, the risk impact, and the mitigation steps that must be taken, including system improvements to prevent similar leaks.
"Criminal proceedings can be carried out after the investigation has found alleged criminal act," it said.
Related news: MP urges police to prioritize public service, protection amid COVID-19
On Wednesday (November 17, 2021), a Twitter account @son1x777 reported an alleged leak of personal data stored on the police database, including names, police registration numbers (NRP), ranks, places and dates of birth, units, positions, addresses, religions, blood types, ethnicities, e-mails, and telephone numbers, and data linked to criminal cases.
ELSAM stressed that the police need to take steps to minimize the risk for data subjects.
It also needs to evaluate and audit security systems in processing personal data to prevent a recurrence, it said.
According to ELSAM, the existence of a comprehensive law on personal data protection is urgently needed to anticipate personal data leaks.
"Learning from the leak of the police database, that covers sensitive data, law on personal data protection would also need to regulate the gravity of protection of personal data," it said.
Related news: UI criminologist points to surge in cybercrimes during pandemic
Translator: Rizka K, Sri Haryati
Editor: Rahmad Nasution
Copyright © ANTARA 2021
