<![CDATA[The rapid digital transformation has fundamentally reshaped the concept of national sovereignty, shifting security concerns from territorial boundaries toward the borderless domain of cyberspace. Indonesia’s increasing dependence on digital infrastructure has generated significant opportunities for economic and social development while simultaneously exposing citizens and state institutions to emerging forms of digital victimization, including data breaches, ransomware attacks, cyber harassment, and unauthorized personal data exploitation. The 2024 ransomware attack on the National Data Center (Pusat Data Nasional/PDN) illustrates the structural vulnerabilities of Indonesia’s cyber governance, revealing gaps between legal frameworks, institutional capacity, and operational resilience. This study aims to examine Indonesia’s legal and institutional framework for addressing digital victimization by analyzing the alignment between Law No. 27 of 2022 on Personal Data Protection (PDP Law) and international data protection standards, particularly the European Union General Data Protection Regulation (GDPR). This research employs a doctrinal legal method with comparative and case study approaches. Secondary data consisting of legislation, international instruments, academic literature, and government reports are analyzed qualitatively through legal interpretation and content analysis. The findings reveal that although the PDP Law represents a significant advancement toward comprehensive data protection, substantial challenges remain regarding institutional independence, enforcement mechanisms, national security exemptions, and inter-agency coordination. Through the perspectives of Routine Activity Theory, Rational Choice Theory, and victimology, this study demonstrates that digital victimization results not only from technological weaknesses but also from insufficient guardianship and fragmented governance structures. This research proposes a harmonization model integrating stronger victim protection mechanisms, accountable cybersecurity governance, judicial oversight of state data access, and institutional reforms to strengthen Indonesia’s digital resilience. The study argues that personal data protection should be positioned as a fundamental component of national security rather than merely an administrative obligation.]]>
Copyrights © 2026
