The rapid growth of social media, particularly Instagram, has fueled an increasingly massive trend of personal information sharing among university students. Amid rising threats of data breaches and the enactment of Law Number 27 of 2022 on Personal Data Protection, students' understanding of digital privacy as a citizen's right has become an urgent issue to examine. This study aims to identify and describe the level of understanding of Universitas Pendidikan Indonesia students regarding the importance of personal data protection on Instagram as a citizen's right. This research employed a quantitative approach with a survey method. Data were collected through a closed-ended Likert-scale questionnaire distributed to 344 active students from all faculties at Universitas Pendidikan Indonesia, selected using simple random sampling with proportional allocation per faculty. Data analysis was conducted using descriptive statistics with the assistance of SPSS and Jamovi software. The results indicate that students' level of understanding of personal data protection as a citizen's right falls into the high category, with a mean score of 4.37 and a total average score of 96.14 out of a maximum scale of 110. The highest level of understanding was demonstrated on the principle that personal information should only be shared with the owner's consent (mean 4.68), while the lowest was found on the aspect of using Instagram consciously and deliberately as a privacy protection strategy (mean 3.93). These findings reveal that although students possess strong normative understanding, such awareness has not been fully translated into reflective digital behavior. Strengthening digital literacy that addresses behavioral and habitual dimensions is the primary recommendation of this study.