Tesis ini membahas mengenai pembentukan peraturan keamanan data European Union General Data Protection Regulation (EU GDPR). Uni Eropa berhasil menetapkan EU GDPR pada tahun 2016, disaat negara-negara masih kesulitan menghasilkan kebijakan keamanan yang dapat menjangkau ranah siber secara efektif. Peraturan tersebut berbentuk regulasi sehingga tidak membutuhkan ratifikasi tingkat nasional, sedangkan belum semua negara anggota Uni Eropa memiliki aturan dasar mengenai keamanan siber. Sehingga menjadi pertanyaan mengapa Uni Eropa berhasil membentuk EU GDPR tanpa mendapatkan penolakan dari badan-badan Uni Eropa. Penelitian dilakukan menggunakan metode kualitatif dan teori neofungsionalisme sebagai kerangka analisis. Neofungsionalisme melihat adanya fenomena spillover dalam terjadinya integrasi di Eropa. Tiga variabel spillover yaitu functional spillover, political spillover dan cultivated spillover menjadi faktor-faktor yang mempengaruhi pembentukan kebijakan. Berdasarkan faktor-faktor tersebut disimpulkan bahwa peran badan supranasional merupakan kunci penting pada proses integrasi penyebab berhasilnya pembentukan EU GDPR.

---

This thesis examines the establishment of EU's new data protection regulation, European Union General Data Protection Regulation (EU GDPR). EU officially signed EU GDPR in 2016, at the moment when states are still in the hassle of procuring a security policy which able to reach the cyberspace effectively. With the form of an EU regulation the EU GDPR do not have to go through ratification on national level, whereas many of EU countries still haven't set their own basic law on cyber security yet. Thus, it brings up the question on why EU's managed to establish EU GDPR without any objections from the EU bodies. This study uses quantitative methodology and neofunctionalism theory as the analytical framework. Neofunctionalism recognize the spillover phenomenon in the occurrence of European Integration. Three variables of spillover: functional spillover, political spillover and cultivated spillover are the main factors which decides the result of the policy agreement. Based on those factors it can be concluded that supranational bodies within EU act as the important key regarding the process of integration which lead to the successful establishment of EU GDPR.