Legal Expert: Data Protection Law Emphasizes Strict Liability of Data Controllers

With the implementation of the 2022 Personal Data Protection Law, personal data is recognized as a constitutional right that must be stringently protected by processors. Legal expert Andreas James Sihite stated that under this law, data controllers bear strict liability for data security. This implies that violations, such as unauthorized data processing, can lead to substantial administrative penalties and civil lawsuits. The law highlights the need for actual accountability in the AI era, placing the burden of proof for data security on data controllers.