The rapid development of Artificial Intelligence (AI) has accelerated the emergence of deepfake technology, which offers significant benefits in fields such as entertainment, education, and digital content creation but also poses serious legal and societal risks. The misuse of deepfakes has contributed to privacy violations, identity theft, defamation, misinformation, fraud, and other forms of cybercrime. In Indonesia, the current legal framework remains inadequate because existing regulations are fragmented, reactive, and lack specific provisions governing deepfake technology. This study aims to analyze the adequacy of Indonesian legal regulations in addressing deepfake misuse and to propose the adoption of a risk-based regulation approach as a more adaptive and comprehensive regulatory framework. This research employs a normative legal method using statutory and conceptual approaches by examining relevant legislation, including the Electronic Information and Transactions Law, the Personal Data Protection Law, and the Indonesian Criminal Code. The findings indicate that Indonesia's legal framework primarily relies on broad interpretations of existing laws, resulting in legal uncertainty and limited preventive capacity. In contrast, a risk-based regulation approach classifies AI applications according to their level of risk and imposes proportional legal obligations, including transparency, accountability, and preventive risk management. The study concludes that adopting a risk-based regulatory framework would strengthen Indonesia's legal system by improving legal certainty, protecting individual rights, and ensuring a more effective balance between technological innovation and public safety.
Copyrights © 2026