<![CDATA[The development of information technology and Artificial Intelligence (AI) has shifted the paradigm of state resilience away from protection oriented toward territorial areas and toward the protection of a borderless digital space. This shift presents new challenges for the state in protecting its citizens, as reflected in the cyberattack on Indonesia's Temporary National Data Center (PDNS) in 2024. Although Indonesia already has various regulations concerning information technology, cybersecurity, and personal data protection, national legal policy has not yet been fully able to build an integrated framework to respond to digital threats in the AI era. This research aims to analyze the legal policy of state resilience in protecting citizens through a case study of the cyberattack on PDNS, and to reconstruct legal policy based on Digital Sovereignty as a paradigm for strengthening state resilience. This research uses the normative legal research method with statutory, conceptual, and case approaches. The results show that the national legal framework remains sectoral in nature and has not been able to comprehensively integrate cybersecurity governance, data protection, and the use of AI. Therefore, this research offers a reconstruction of legal policy based on Digital Sovereignty, which places control over data, digital infrastructure, cybersecurity, and AI governance as a new foundation for strengthening state resilience while guaranteeing the protection of citizens' constitutional rights in the era of digital transformation. The proposed model integrates data sovereignty, infrastructure resilience, AI accountability, supply chain security, and digital human capacity through preventive, adaptive, rights based governance mechanisms for public institutions.]]>
