The European Union has just published a new regulation on the Protection of Personal Data, called the General Data Protection Regulation, which is quite comprehensive settings. Meanwhile, the Personal Data Protection regulations are still scattered in various sectors both in the Act, government regulation, regulation, until the Bank Indonesia Regulation. Many of the cases of misuse of personal data become authors question arises, whether the owner of Personal Data to get compensation or not. Writing this paper aims to describe the comparison of the application as well as personal data recovery settings on Personal Data Protection regulations in Indonesia with the General Data Protection Regulation (GDPR). As for the background of this paper for their personal data theft case Facebook conducted by Cambridge Analytica some of which personal data is stolen personal data from Indonesia. After the incident the European Union published a regulation called the General Data Protection Regulation, which this regulation acts as a protection of personal data. Personal data recovery becomes very crucial role in the settlement of disputes over the personal data breach. To supplement the results of the study authors, the author uses the type of normative-empirical research using the Act as a source of law and interviews as sources of support theory. The research approach that I use is the approach Law, Comparative Law and Conceptual. The results obtained are not finding good recovery setting personal data in the General Data Protection Regulation and the regulations of Personal Data Protection in Indonesia, so the author uses the theory and Preventive Legal Protection Legal Protection Repressive to know the Personal Data Storage obligation to the rights of owners of Personal Data.