The Effectiveness of Personal Data Protection Law in Addressing Cybersecurity Challenges in Indonesia

Authors

  • Suprapto Institut Andi Sapada (IAS), South Sulawesi, Indonesia
  • Muh Fadli Faisal Rasyid Institut Andi Sapada (IAS), South Sulawesi, Indonesia

DOI:

https://doi.org/10.38035/jlph.v6i6.3275

Keywords:

Personal Data Protection Law, Cybersecurity, Data Breach, Digital Governance, Regulatory Effectiveness

Abstract

The increasing dependence on digital systems and electronic services in Indonesia has intensified cybersecurity threats and the risk of personal data breaches in public and private sectors. Despite the enactment of personal data protection regulations, recurring cyber incidents indicate a gap between normative legal protection and its practical implementation. This study examines the effectiveness of Indonesia’s Personal Data Protection Law in addressing cybersecurity challenges. The research employs a normative legal method with a qualitative approach through statutory, conceptual, and case analysis. Legal materials were collected from statutory regulations, academic journals, books, and reports concerning personal data protection and cybersecurity governance. The analysis shows that Indonesia’s personal data protection framework is normatively adequate, incorporating principles of accountability, data security, and privacy protection. However, its practical effectiveness remains constrained by weak enforcement, limited institutional and technical capacity, regulatory uncertainty, fragmented governance, and inadequate cybersecurity preparedness. The study contributes by examining personal data protection as an integrated cybersecurity governance issue rather than solely a matter of privacy and legal compliance. Effective protection therefore requires not only comprehensive regulation but also stronger institutional coordination, integrated governance, and consistent cybersecurity enforcement to support a resilient digital ecosystem in Indonesia.

References

Aryanti, D. R. (2025). Cybersecurity Governance in Public Institutions: Managing Digital Risks and Resilience. VISIONER : Jurnal Pemerintahan Daerah Di Indonesia, 17(3), 24–35. https://doi.org/10.54783/jv.v17i3.1424

Attidhira, S. W., & Permana, Y. S. (2022). Review of Personal Data Protection Legal Regulations in Indonesia. Awang Long Law Review, 5(1), 280–294. https://doi.org/10.56301/awl.v5i1.562

Booth, A., Sutton, A., & Papaioannou, D. (2016). Systematic Approaches to a Successful Literature Review. SAGE Publications.

Budiman, R. (2023). The Development of Personal Data Protection Law in Indonesia: Challenges and Prospects for the Implementation of Law No. 27 of 2022. Jurnal Smart Hukum (JSH). https://doi.org/10.55299/jsh.v2i1.1352

Creswell, J. W., & Poth, C. N. (2017). Qualitative Inquiry & Research Design: Choosing Among Five Approaches (4th ed., Vol. 3, Issue 1). SAGE Publications Inc. https://doi.org/10.13187/rjs.2017.1.30

Effendi, A. (2021). Cybersecurity governance in Indonesia: Challenges in digital transformation. Journal of Information Security Studies, 5(2), 45–60.

Fikri, M., & Rusdiana, S. (2023). Ruang Lingkup Perlindungan Data Pribadi: Kajian Hukum Positif Indonesia. Ganesha Law Review, 5(1), 45–46.

Fuady, A., Hasibuan, F. Y., & Kotto, Z. (2025). Strengthening Cybersecurity and Data Protection Legal Framework in Indonesia: A Normative Analysis of Current Challenges and Future Directions. Law and Justice Research Journal, 1(3), 15–27. https://doi.org/10.70062/ljrj.v1i3.87

Hardiansyah, Z. (2024). Kronologi Serangan Ransomware ke PDN dan Penanganannya yang Tak Kunjung Usai. https://tekno.kompas.com/read/2024/07/10/12350077/kronologi-serangan-ransomware-ke-pdn-dan-penanganannya-yang-tak-kunjung-usai

Hardjaloka, L. (2014). Studi Penerapan E-Government Di Indonesia dan Negara Lainnya Sebagai Solusi Pemberantasan Korupsi Di Sektor Publik. Jurnal Rechts Vinding: Media Pembinaan Hukum Nasional, 3(3), 435. https://doi.org/10.33331/rechtsvinding.v3i3.35

Hariana, R. R., Hadi, E. N., & Jamal, A. P. (2025). Strengthening Cybersecurity: A Comparative Analysis of Agile Governance in Preventing Data Leakage in Indonesia and Malaysia. Agile Governance and Innovation Measurement Journal, 2(1), 40–58. https://doi.org/10.18196/agimjournal.v2i1.23

Hernowo, B. A. (2025). The Challenges of Implementing the Personal Data Protection Law in Indonesia: Delays in Establishing a Regulatory Authority. Proceedings of the First International Cyber Law Conference, ICL-C 2023, 11 November 2023, Jakarta, Indonesia. https://doi.org/10.4108/eai.11-11-2023.2351333

Hutchinson, T. (2014). Doctrinal research: Researching the jury. In D. Watkins & M. Burton (Eds.), Research Methods in Law. Routledge.

Judijanto, L., Solapari, N., & Putra, I. (2024). An Analysis of the Gap Between Data Protection Regulations and Privacy Rights Implementation in Indonesia. The Easta Journal Law and Human Rights, 3(01), 20–29. https://doi.org/10.58812/eslhr.v3i01

Khudori, A., & Lala, A. (2024). Legal Implications Of Data Breach Cases In Indonesia: Challenges And Solutions In The Era Of Personal Data Protection. Indonesian Cyber Law Review. https://doi.org/10.59261/iclr.v1i1.1

Kurniawan, K. D., Hehanussa, D., Setiawan, R., Susilowati, I., Sopian, & Helfisar, D. (2024). Criminal Sanctions and Personal Data Protection in Indonesia. Lex Publica. https://doi.org/10.58829/lp.11.2.2024.255

Lestari, E., & Rasji, R. (2024). Legal Study on Personal Data Protection Based on Indonesian Legislation. Awang Long Law Review, 6(2), 471–477. https://doi.org/10.56301/awl.v6i2.1206

Marune, A. E. M. S., & Hartanto, B. (2021). Strengthening Personal Data Protection, Cyber Security, and Improving Public Awareness in Indonesia: Progressive Legal Perspective. International Journal of Business, Economics, and Social Development, 2(4), 143–152. https://doi.org/10.46336/ijbesd.v2i4.170

Mirna, M., Judhariksawan, & Maskum. (2023). Analisis Pengaturan Keamanan Data Pribadi Di Indonesia. Jurnal Ilmiah Living Law, 15(1), 16–30. https://doi.org/10.30997/jill.v15i1.4726

Morić, Z., Dakic, V., Djekic, D., & Regvart, D. (2024). Protection of Personal Data in the Context of E-Commerce. Journal of Cybersecurity and Privacy, 4(3), 731–761. https://doi.org/10.3390/jcp4030034

Ngurah, G., Widiatedja, P., & Mishra, N. (2022). Establishing an independent data protection authority in Indonesia: a future–forward perspective. International Review of Law, Computers & Technology, 37, 252–273. https://doi.org/10.1080/13600869.2022.2155793

Noprianto, B., & Amelia, T. (2024). The Legal Reform of The Independent Supervisory Institution for The Enforcement of Personal Data Protection Law. SHS Web of Conferences, 204, 07003. https://doi.org/10.1051/shsconf/202420407003

Rahman, F., & Mulyani, C. K. (2025). Minimising unnecessary restrictions on cross-border data flows? Indonesia’s position and challenges post personal data protection act enactment. International Review of Law, Computers & Technology, 39(2), 281–300. https://doi.org/10.1080/13600869.2024.2359901

Ramadhan, K. R., & Wijaya, C. (2022). The Challenges of Personal Data Protection Policy in Indonesia: Lesson learned from the European Union, Singapore, and Malaysia. Technium Social Sciences Journal. https://doi.org/10.47577/tssj.v36i1.7442

Razi, F., Tuasikal, H., & Markus, D. P. (2024). Implementation and Challenges of the Personal Data Protection Law in Indonesia. Jurnal Indonesia Sosial Teknologi. https://doi.org/10.59141/jist.v5i12.1285

Rosadi, S. D. (2015). Privasi Atas Data Pribadi : Perlindungan Hukum Dan Bentuk Pengaturan Di Indonesia (Personal Data Privacy : Legal Protection And Forms Of Regulations In Indonesia). Jurnal Penelitian Hukum DE JURE, 15(2).

Sihombing, A. B. (2025). Data Protection in Limbo: Regulatory Challenges in the Absence of an Implementing Authority in Indonesia. SENTRI: Jurnal Riset Ilmiah, 4(11), 3656–3667. https://doi.org/10.55681/sentri.v4i11.4965

Situmeang, A., Park, J., Sudirman, L., Silviani, N. Z., & Agustini, S. (2025). Evaluating Data Breach Notification Protocols. Lentera Hukum, 12(1), 42–61. https://doi.org/10.19184/ejlh.v12i1.47621

Smits, J. (2012). The Mind and Method of the Legal Academic, Introduction. Maastricht University.

Stevani, W., & Disemadi, H. S. (2021). Urgency of Cryptocurrency Regulation in Indonesia: The Preventive Action for Ransomware Crime. Hang Tuah Law Journal, 5(1), 52–66. https://doi.org/10.30649/htlj.v5i1.32

Syailendra, M. R. (2024). Personal Data Protection Law in Indonesia: Challenges and Opportunities. Indonesia Law Review, 14(2), 56–72. https://doi.org/10.15742/ilrev.v14n2.4

Tanzilla, F. D., Hanita, M., & Widiawan, B. (2023). Cyber Security In Indonesia Post Establishment Of The Personal Data Protection Law. International Journal of Progressive Sciences and Technologies. https://doi.org/10.52155/ijpsat.v40.2.5617

Taufiq, M., Kurniawan, M. R., & Kenyo, A. S. (2025). The Legal Protection of Personal Data in the Digital Era: A Comparative Study of Indonesian Law and the GDPR. International Journal of Business, Law, and Education. https://doi.org/10.56442/ijble.v6i2.1178

Utomo, W., Wills, G., & Walters, R. (2020). Assessing cybersecurity readiness in Indonesian e-government systems. Journal of Cyber Policy, 5(3), 321–338. https://doi.org/10.1080/23738871.2020.xxxxxx

Van Hoecke, M. (2017). Methodologies of Legal Research: Which Kind of Method for What Kind of Discipline? In M. Van Hoecke (Ed.), European Academy of Legal Theory Series. Hart Publishing.

Watkins, D., & Burton, M. (2025). Research Methods in Law (D. Watkins & M. Burton (eds.); 3rd ed.). Routledge. https://doi.org/10.4324/9781032710372

Downloads

Published

2026-10-20

How to Cite

Suprapto, & Faisal Rasyid, M. F. (2026). The Effectiveness of Personal Data Protection Law in Addressing Cybersecurity Challenges in Indonesia. Journal of Law, Politic and Humanities, 6(6), 5037–5048. https://doi.org/10.38035/jlph.v6i6.3275

Issue

Vol. 6 No. 6 (2026): (JLPH) Journal of Law, Politic and Humanities

Section

Articles

License

Copyright (c) 2026 Suprapto, Muh Fadli Faisal Rasyid

Creative Commons License

This work is licensed under a Creative Commons Attribution 4.0 International License.

Authors who publish their manuscripts in this journal agree to the following conditions:

  1. The copyright on each article belongs to the author(s).
  2. The author acknowledges that the Journal of Law, Poliitic and Humanities (JLPH) has the right to be the first to publish with a Creative Commons Attribution 4.0 International license (Attribution 4.0 International (CC BY 4.0).
  3. Authors can submit articles separately, arrange for the non-exclusive distribution of manuscripts that have been published in this journal into other versions (e.g., sent to the author's institutional repository, publication into books, etc.), by acknowledging that the manuscript has been published for the first time in the Journal of Law, Poliitic and Humanities (JLPH).