Abstract
This paper proposes a personal data protection system for online exam proctoring that complies with Indonesian personal data protection laws. Ratified in 2022, the Government of Indonesia provides a grace period until 2024 in implementing this Law to prepare related parties to adapt their services to electronic and non-electronic based. Later violations of this Law can be subject to criminal penalties of 4–6 years, a maximum fine of 6 billion Rupiah per incident, and a maximum sanction of 2% of total annual income. This is a different motivation for related parties to ensure compliance with the PDP Law. Here we propose applying the data labeling model in combination with Fusion/UML to provide access control and guarantee privacy for access to personal data to comply with the PDP Law. We illustrate the design that we are proposing with a case study for Face Recognition-based remote proctoring in an online proctoring Learning Management System that runs at our institution.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Similar content being viewed by others
References
Dewan Perwakilan Rakyat-indonesia: UU no 27 Tahun 2022 Tentang Perlindungan Data Pribadi (2022)
Hisbulloh, M.H.: Urgensi Rancangan Undang-Undang (RUU) Perlindungan Data Pribadi. Jurnal Hukum (2021)
Clark, T.M., Callam, C.S., Paul, N.M., Stoltzfus, M.W., Turner, D.: Testing in the time of COVID-19: a sudden transition to unproctored online exams. J. Chem. Educ. 97, 3413–3417 (2020)
Lee, K., Fanguy, M.: Online exam proctoring technologies: Educational innovation or deterioration? Br. J. Educ. Technol. 53, 475–490 (2022)
Kharbat, F.F., Abu Daabes, A.S.: E-proctored exams during the COVID-19 pandemic: a close understanding. Educ. Inf. Technol. (Dordr) 26, 6589–6605 (2021)
Coghlan, S., Miller, T., Paterson, J.: Good proctor or “Big Brother”? Ethics of online exam supervision technologies. Philos. Technol. 34, 1581–1606 (2021)
Hertianto, M.R.: Sistem Penegakan Hukum Terhadap Kegagalan Dalam Perlindungan Data Pribadi Di Indonesia. Kertha Patrika (2021)
Arruda, M.F., Bulcão-Neto, R.F.: Toward a lightweight ontology for privacy protection in IoT. In: Proceedings of the 34th ACM/SIGAPP Symposium on Applied Computing. Association for Computing Machinery, pp 880–888. New York, NY, USA (2019)
Rajagopalan, S.R., Sankar, L., Mohajer, S., Poor, H.V.: Smart meter privacy: a utility-privacy framework. In: 2011 IEEE International Conference on Smart Grid Communications (SmartGridComm), pp .190–195 (2011). Ieeexplore.ieee.org
Mrissa, M., Tbahriti, S.-E., Truong, H.-L.: Privacy model and annotation for DaaS. In: 2010 Eighth IEEE European Conference on Web Services, pp. 3–10 (2010). ieeexplore.ieee.org
Kammueller F (2018) Designing data protection for GDPR compliance into IoT healthcare systems. In: 2018 IEEE International Conference on Systems, Man, and Cybernetics (SMC), pp 3319–3324 (2018). ieeexplore.ieee.org
Australian Government, “Privacy Act 1988,” Cth, No. 119 (1988)
Jefatura, D., De España, R.: Spanish Fundamental Law on Data Protection and Digital Rights Guarantee (1999)
Japan: Act on the Protection of Personal Information Act No. 57 of ( 2003) (2003) Act on the Protection of Personal Information Act No. 57 of (2003)
Government of Singapore, “Personal Data Protection Act 2012,” No. 26 (2012)
Republic of the Philippines, “Data Privacy Act of 2012,” Republic Act No. 10173 (2012)
United Kingdom, “Data Protection Act 2018,” c. 12 (2018)
Government of Thailand, “Personal Data Protection Act B.E. 2562 (2019) of Thailand (PDPA),” B.E. 2562 (2019)
Government of South Korea, “Personal Information Protection Act 2020,” No. 16930 (2020)
Nugroho, M.A., Abdurohman, M., Prabowo, S., Nurhayati, I.K., Rizal, A.: Intelligent Remote Online Proctoring in Learning Management Systems. In: So-In, C., Londhe, N.D., Bhatt, N., Kitsing, M. (eds.) Information Systems for Intelligent Systems. Smart Innovation, Systems and Technologies, vol 324. Springer, Singapore (2023). https://doi.org/10.1007/978-981-19-7447-2_21
Turnbull, D., Chugh, R., Luck, J.: Learning management systems, an overview. In: Tatnall, A. (ed.) Encyclopedia of Education and Information Technologies, pp. 1052–1058. Springer International Publishing, Cham (2020)
Labayen, M., Vea, R., Flórez, J., Aginako, N., Sierra, B.: Online student authentication and proctoring system based on multimodal biometrics technology. IEEE Access 9, 72398–72411 (2021)
Bittner, M., Kammuller, F. Translating fusion/UML to object-Z. In: First ACM and IEEE International Conference on Formal Methods and Models for Co-Design, 2003. MEMOCODE’03. Proceedings, pp 49–50 (2003)
Myers, A.C., Liskov, B.: Protecting privacy using the decentralized label model. ACM Trans. Softw. Eng. Methodol. 9, 410–442 (2000)
Myers, A.C., Liskov, B.: Complete, safe information flow with decentralized labels. In: Proceedings. 1998 IEEE Symposium on Security and Privacy (Cat. No.98CB36186), pp 186–197 (1998) .ieeexplore.ieee.org
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2024 The Author(s), under exclusive license to Springer Nature Switzerland AG
About this paper
Cite this paper
Prabowo, S., Abdurohman, M., Nuha, H.H., Sutikno, S. (2024). A Data Protection Design for Online Exam Proctoring in Compliance with the Indonesian Personal Data Protection Law. In: Arai, K. (eds) Intelligent Systems and Applications. IntelliSys 2023. Lecture Notes in Networks and Systems, vol 824. Springer, Cham. https://doi.org/10.1007/978-3-031-47715-7_36
Download citation
DOI: https://doi.org/10.1007/978-3-031-47715-7_36
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-031-47714-0
Online ISBN: 978-3-031-47715-7
eBook Packages: Intelligent Technologies and RoboticsIntelligent Technologies and Robotics (R0)