Analisis Yuridis Pertanggungjawaban Pidana terhadap Pelaku Penyalahgunaan Data Pribadi dalam Transaksi Elektronik di Indonesia

M. Resko; Siti  Rahmah; Bambang Sasmita Adi  Putra

Authors

M. Resko Universitas Islam Indragiri
Siti Rahmah Universitas Islam Indragiri
Bambang Sasmita Adi Putra Universitas Islam Indragiri

Keywords:

Personal Data Protection; Criminal Liability; Electronic Transactions; Electronic Information and Transactions Law; Legal Certainty.

Abstract

The rapid growth of digital technology has increased the risk of personal data misuse in electronic transactions, creating significant legal challenges in Indonesia. This study aims to analyze criminal liability for perpetrators of personal data misuse, examine the application of the lex specialis derogat legi generali principle between the Personal Data Protection Law and the Electronic Information and Transactions Law, and identify obstacles to law enforcement. This research employed a normative juridical method using statutory, conceptual, and case approaches. Legal materials consisted of primary, secondary, and tertiary legal sources analyzed qualitatively through a prescriptive approach. The findings indicate that criminal liability may be imposed on both individuals and corporations that unlawfully obtain, disclose, or misuse personal data. Although the Personal Data Protection Law provides a more specific legal framework, practical implementation still encounters regulatory overlap, limited institutional capacity, digital evidence challenges, and inadequate cyber law expertise among law enforcement officers. Therefore, harmonization of regulations, institutional strengthening, and enhancement of digital forensic capabilities are essential to ensure effective legal protection and legal certainty.

References

Achmad Ali. (2017). Menguak Teori Hukum (Legal Theory) dan Teori Peradilan (Judicialprudence) Termasuk Interpretasi Undang-Undang (Legisprudence). Jakarta: Kencana.
Azhar, D. P., & Mahyani, A. (2023). Pertanggungjawaban pidana korporasi sebagai pelaku tindak pidana penyebaran data pribadi konsumen. Bureaucracy Journal: Indonesia Journal of Law and Social-Political Governance, 3(2), 1124–1138.
Brenner, S. W. (2018). Cybercrime and the Law: Challenges, Issues, and Outcomes. Boston: Northeastern University Press.
Greenleaf, G. (2023). Global data privacy laws 2023: Despite challenges, 162 laws show GDPR dominance. Privacy Laws & Business International Report, 183, 10–15.
Hadjon, P. M. (1987). Perlindungan Hukum Bagi Rakyat Indonesia. Surabaya: Bina Ilmu.
Kurniawan, K. D. (2024). Criminal sanctions and personal data protection in Indonesia. Lex Publica, 11(2), 155–170.
Lutrianto, I. (2025). Legal problems of personal data protection in the digital era: Juridical analysis of Indonesia's Personal Data Protection Law. Global International Journal of Law and Social Sciences, 3(1), 25–38.
Marzuki, P. M. (2021). Penelitian Hukum (Edisi Revisi). Jakarta: Kencana.
Mertokusumo, S. (2005). Mengenal Hukum: Suatu Pengantar. Yogyakarta: Liberty.
Moeljatno. (2008). Asas-Asas Hukum Pidana. Jakarta: Rineka Cipta.
Palit, S. M. L. (2025). Legal perspective on data privacy protection as a human right in Indonesia. East Asian Journal of Law and Human Rights, 2(1), 44–59.
Putra, R. K., & Idris, M. F. (2024). Perlindungan data pribadi dalam era big data: Implikasi hukum di Indonesia. Jurnal Jaksa, 2(4), 178–193. https://doi.org/10.51903/jaksa.v2i4.2260
Razi, F., Tuasikal, H., & Markus, D. P. (2024). Implementation and challenges of the Personal Data Protection Law in Indonesia. Jurnal Indonesia Sosial Teknologi, 5(12), 6559–6565. https://doi.org/10.59141/jist.v5i12.1285
Republik Indonesia. Kitab Undang-Undang Hukum Pidana.
Republik Indonesia. Peraturan Pemerintah Nomor 71 Tahun 2019 tentang Penyelenggaraan Sistem dan Transaksi Elektronik.
Republik Indonesia. Undang-Undang Dasar Negara Republik Indonesia Tahun 1945.
Republik Indonesia. Undang-Undang Nomor 1 Tahun 2024 tentang Perubahan Kedua atas Undang-Undang Nomor 11 Tahun 2008 tentang Informasi dan Transaksi Elektronik.
Republik Indonesia. Undang-Undang Nomor 11 Tahun 2008 tentang Informasi dan Transaksi Elektronik.
Republik Indonesia. Undang-Undang Nomor 19 Tahun 2016 tentang Perubahan atas Undang-Undang Nomor 11 Tahun 2008 tentang Informasi dan Transaksi Elektronik.
Republik Indonesia. Undang-Undang Nomor 27 Tahun 2022 tentang Pelindungan Data Pribadi.
Simanjuntak, P. H. (2024). Perlindungan hukum terhadap data pribadi berdasarkan Undang-Undang Nomor 27 Tahun 2022 tentang Pelindungan Data Pribadi. Jurnal Esensi Hukum, 6(2), 145–163.
Soekanto, S., & Mamudji, S. (2019). Penelitian Hukum Normatif: Suatu Tinjauan Singkat. Jakarta: RajaGrafindo Persada.
Solove, D. J. (2021). The myth of the privacy paradox. George Washington Law Review, 89(1), 1–51.
Wall, D. S. (2021). Cybercrime: The Transformation of Crime in the Information Age (3rd ed.). Cambridge: Polity Press.
Zainuddin Ali. (2021). Metode Penelitian Hukum. Jakarta: Sinar Grafika.