BibTex Citation Data :
@article{Dilrev82504, author = {Indah Sri Utari and Muhammad Azil Maskur and Ridwan Arifin and Christina Noelia Umbría}, title = {LEGAL PROTECTION AGAINST DIGITAL VICTIMIZATION: ALIGNING INDONESIA’S NATIONAL SECURITY LAWS WITH GLOBAL PRIVACY STANDARDS}, journal = {Diponegoro Law Review}, volume = {11}, number = {2}, year = {2026}, keywords = {Digital Victimization; Personal Data Protection Law; Data Privacy; National Security Standard; Legal Harmonization}, abstract = { The rapid digital transformation has fundamentally reshaped the concept of national sovereignty, shifting security concerns from territorial boundaries toward the borderless domain of cyberspace. Indonesia’s increasing dependence on digital infrastructure has generated significant opportunities for economic and social development while simultaneously exposing citizens and state institutions to emerging forms of digital victimization, including data breaches, ransomware attacks, cyber harassment, and unauthorized personal data exploitation. The 2024 ransomware attack on the National Data Center (Pusat Data Nasional/PDN) illustrates the structural vulnerabilities of Indonesia’s cyber governance, revealing gaps between legal frameworks, institutional capacity, and operational resilience. This study aims to examine Indonesia’s legal and institutional framework for addressing digital victimization by analyzing the alignment between Law No. 27 of 2022 on Personal Data Protection (PDP Law) and international data protection standards, particularly the European Union General Data Protection Regulation (GDPR). This research employs a doctrinal legal method with comparative and case study approaches. Secondary data consisting of legislation, international instruments, academic literature, and government reports are analyzed qualitatively through legal interpretation and content analysis. The findings reveal that although the PDP Law represents a significant advancement toward comprehensive data protection, substantial challenges remain regarding institutional independence, enforcement mechanisms, national security exemptions, and inter-agency coordination. Through the perspectives of Routine Activity Theory, Rational Choice Theory, and victimology, this study demonstrates that digital victimization results not only from technological weaknesses but also from insufficient guardianship and fragmented governance structures. This research proposes a harmonization model integrating stronger victim protection mechanisms, accountable cybersecurity governance, judicial oversight of state data access, and institutional reforms to strengthen Indonesia’s digital resilience. The study argues that personal data protection should be positioned as a fundamental component of national security rather than merely an administrative obligation. }, issn = {2527-4031}, pages = {225--259} doi = {10.14710/dilrev.11.2.2026.225-259}, url = {https://ejournal.undip.ac.id/index.php/dlr/article/view/82504} }
Refworks Citation Data :
The rapid digital transformation has fundamentally reshaped the concept of national sovereignty, shifting security concerns from territorial boundaries toward the borderless domain of cyberspace. Indonesia’s increasing dependence on digital infrastructure has generated significant opportunities for economic and social development while simultaneously exposing citizens and state institutions to emerging forms of digital victimization, including data breaches, ransomware attacks, cyber harassment, and unauthorized personal data exploitation. The 2024 ransomware attack on the National Data Center (Pusat Data Nasional/PDN) illustrates the structural vulnerabilities of Indonesia’s cyber governance, revealing gaps between legal frameworks, institutional capacity, and operational resilience. This study aims to examine Indonesia’s legal and institutional framework for addressing digital victimization by analyzing the alignment between Law No. 27 of 2022 on Personal Data Protection (PDP Law) and international data protection standards, particularly the European Union General Data Protection Regulation (GDPR). This research employs a doctrinal legal method with comparative and case study approaches. Secondary data consisting of legislation, international instruments, academic literature, and government reports are analyzed qualitatively through legal interpretation and content analysis. The findings reveal that although the PDP Law represents a significant advancement toward comprehensive data protection, substantial challenges remain regarding institutional independence, enforcement mechanisms, national security exemptions, and inter-agency coordination. Through the perspectives of Routine Activity Theory, Rational Choice Theory, and victimology, this study demonstrates that digital victimization results not only from technological weaknesses but also from insufficient guardianship and fragmented governance structures. This research proposes a harmonization model integrating stronger victim protection mechanisms, accountable cybersecurity governance, judicial oversight of state data access, and institutional reforms to strengthen Indonesia’s digital resilience. The study argues that personal data protection should be positioned as a fundamental component of national security rather than merely an administrative obligation.
Article Metrics:
Last update:
Last update: 2026-10-30 16:33:45
The Authors submitting a manuscript do so on the understanding that if accepted for publication, copyright of the article shall be assigned to Diponegoro Law Review journal (Dilrev) and Faculty of Law, Universitas Diponegoro as publisher of the journal. Copyright encompasses rights to reproduce and deliver the article in all form and media, including reprints, photographs, microfilms, and any other similar reproductions, as well as translations.
Diponegoro Law Review journal and Faculty of Law, Universitas Diponegoro and the Editors make every effort to ensure that no wrong or misleading data, opinions or statements be published in the journal. In any way, the contents of the articles and advertisements published in Dilrev journal are the sole responsibility of their respective authors and advertisers.
Faculty of Law, Universitas Diponegoro
Gedung Satjipto Rahardjo - Jl. Prof. Soedarto, SH. Tembalang-Semarang
dilrev@live.undip.ac.id
http://ejournal.undip.ac.id/index.php/dlr
024 - 76918201 / 024 - 76918206 (fax)
Diponegoro Law Review (DILREV, e-ISSN : 2527-4031) published by Faculty of Law, Universitas Diponegoro - in collaboration with Asosiasi Pengajar dan Peneliti Hukum Ekonomi Islam Indonesia (APPHEISI) and Asosiasi Sosiologi Hukum Indonesia (ASHI) - under Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.
e-ISSN : 2527-4031