The Constitution in the Digital Era: Is the 1945 Constitution Ready to Address Cyber Threats and Data Security?
DOI:
https://doi.org/10.59011/vjlaws.5.3.2026.510-526Keywords:
Constitution, Personal Data Protection, Cybersecurity, Cyber SovereigntyAbstract
Digital governance, electronic transactions, cloud infrastructure, and public-sector data processing have transformed constitutional law in Indonesia. Cyberattacks, ransomware, data breaches, unlawful surveillance, and insecure personal data processing are no longer merely technical problems; they challenge constitutional guarantees of privacy, legal certainty, personal security, public service continuity, and state sovereignty. This article examines whether the 1945 Constitution of the Republic of Indonesia is normatively prepared to respond to cyber threats and personal data security risks. It asks, first, how the Constitution guarantees the protection of privacy and personal data security, and second, to what extent the state is constitutionally obliged to protect cyber sovereignty and respond to digital security threats. This research uses normative legal research with statutory, conceptual, case, and limited comparative approaches. The legal materials include the 1945 Constitution, the Personal Data Protection Law, the Electronic Information and Transactions Law, cybersecurity regulations, Constitutional Court decisions, and relevant legal scholarship. The article finds that the 1945 Constitution provides an implicit but strong basis for personal data protection through Articles 28G (1), 28D (1), 28H (4), 28F, 28I (4), and 28J. However, constitutional readiness remains incomplete at the operational level because cybersecurity governance is fragmented, independent personal data supervision has not been fully consolidated, and Indonesia still lacks a comprehensive statutory framework on cyber resilience. The article concludes that Indonesia’s Constitution is normatively adaptable but requires stronger statutory translation, independent supervision, risk-based cybersecurity duties, and constitutional proportionality safeguards. The originality of this study lies in integrating privacy, personal data protection, cybersecurity, and cyber sovereignty into one constitutional analysis, while prior studies generally examine these fields separately.
References
Adhari, Ade, Tundjung Herning Sitabuana, and Luisa Srihandayani. “Kebijakan Pembatasan Internet di Indonesia: Perspektif Negara Hukum, Hak Asasi Manusia, dan Kajian Perbandingan.” Jurnal Konstitusi 18, no. 2 (2021): 262–293. https://doi.org/10.31078/jk1821.
Aqilah, Rosa, Deli Waryenti, and Pipi Susanti. “Tanggung Jawab Negara Mengenai Pelindungan Data Pribadi Berdasarkan Undang-Undang Nomor 27 Tahun 2022 Tentang Pelindungan Data Pribadi.” Jurnal Ilmiah Kutei 23, no. 2 (2024): 158–172. https://doi.org/10.33369/jik.v23i2.34476.
Bastos, Filipe Brito, and Przemysław Pałka. “Is Centralised General Data Protection Regulation Enforcement a Constitutional Necessity?” European Constitutional Law Review 19, no. 3 (2023): 487–517. https://doi.org/10.1017/S1574019623000202.
Brkan, Maja. “The Essence of the Fundamental Rights to Privacy and Data Protection: Finding the Way Through the Maze of the CJEU’s Constitutional Reasoning.” German Law Journal 20, no. 6 (2019): 864–883. https://doi.org/10.1017/glj.2019.66.
Celeste, Edoardo. “Digital Constitutionalism: A New Systematic Theorisation.” International Review of Law, Computers & Technology 33, no. 1 (2019): 76–99. https://doi.org/10.1080/13600869.2019.1562604.
Chiara, Pier Giorgio. “Towards a Right to Cybersecurity in EU Law? The Challenges Ahead.” Computer Law & Security Review 53 (2024): 105961. https://doi.org/10.1016/j.clsr.2024.105961.
Chotimah, Hidayat Chusnul. “Tata Kelola Keamanan Siber dan Diplomasi Siber Indonesia di Bawah Kelembagaan Badan Siber dan Sandi Negara.” Politica 10, no. 2 (2019): 113–128. https://doi.org/10.22212/jp.v10i2.1447.
Constitutional Court of the Republic of Indonesia. Decision No. 5/PUU-VIII/2010.
Constitutional Court of the Republic of Indonesia. Decision No. 20/PUU-XIV/2016.
De Gregorio, Giovanni. “The Rise of Digital Constitutionalism in the European Union.” International Journal of Constitutional Law 19, no. 1 (2021): 41–70. https://doi.org/10.1093/icon/moab001.
De Gregorio, Giovanni, and Roxana Radu. “Digital Constitutionalism in the New Era of Internet Governance.” International Journal of Law and Information Technology 30, no. 1 (2022): 68–87. https://doi.org/10.1093/ijlit/eaac004.
Disemadi, Hari Sutra. “Urgensi Regulasi Khusus dan Pemanfaatan Artificial Intelligence dalam Mewujudkan Perlindungan Data Pribadi di Indonesia.” Jurnal Wawasan Yuridika 5, no. 2 (2021): 177–199. https://doi.org/10.25072/jwy.v5i2.460.
Dizon, Michael Anthony C. “Socio-Legal Study of Technology: A Norms and Values Approach to Hacking and Encryption Law and Policy.” Computer Law & Security Review 52 (2024): 105958. https://doi.org/10.1016/j.clsr.2024.105958.
Fauzy, Elfian, and Nabila Alif Radika Shandy. “Hak Atas Privasi dan Politik Hukum Undang-Undang Nomor 27 Tahun 2022 Tentang Pelindungan Data Pribadi.” Lex Renaissance 7, no. 3 (2022): 445–461. https://doi.org/10.20885/JLR.vol7.iss3.art1.
Government Regulation No. 71 of 2019 on Electronic System and Transaction Operation.
Irwansyah, and Ahsan Yunus. Penelitian Hukum: Pilihan Metode & Praktik Penulisan Artikel. Yogyakarta: Mirra Buana Media, 2020.
Kristalia, BRM. Yehizkia Y., and Indra Wisnu Wibisono. “Ancaman Siber dan Penguatan Kedaulatan Digital Indonesia dari Perspektif Geopolitik Digital.” Jurnal Ilmiah Multidisiplin 3, no. 2 (2024): 83–93. https://doi.org/10.56127/jukim.v3i02.1584.
Law No. 1 of 2024 on the Second Amendment to Law No. 11 of 2008 on Electronic Information and Transactions.
Law No. 27 of 2022 on Personal Data Protection.
Mantelero, Alessandro, Giuseppe Vaciago, Maria Samantha Esposito, and Nicole Monte. “The Common EU Approach to Personal Data and Cybersecurity Regulation.” International Journal of Law and Information Technology 28, no. 4 (2020): 297–328. https://doi.org/10.1093/ijlit/eaaa021.
Mujaddidi, Sipghotulloh. “Konstitusionalitas Pembatasan Hak Asasi Manusia dalam Putusan Mahkamah Konstitusi.” Jurnal Konstitusi 18, no. 3 (2021): 539–561. https://doi.org/10.31078/jk1833.
Papakonstantinou, Vagelis. “Cybersecurity as Praxis and as a State: The EU Law Path Towards Acknowledgement of a New Right to Cybersecurity?” Computer Law & Security Review 44 (2022): 105653. https://doi.org/10.1016/j.clsr.2022.105653.
Presidential Regulation No. 28 of 2021 on the National Cyber and Crypto Agency.
Presidential Regulation No. 47 of 2023 on National Cybersecurity Strategy and Cyber Crisis Management.
Presidential Regulation No. 82 of 2022 on Vital Information Infrastructure Protection.
Presidential Regulation No. 95 of 2018 on Electronic-Based Government System.
Qian, Yuzhou, Keng L. Siau, and Fiona F. Nah. “Societal Impacts of Artificial Intelligence: Ethical, Legal, and Governance Issues.” Societal Impacts 3 (2024): 100040. https://doi.org/10.1016/j.socimp.2024.100040.
Quinn, Paul, and Gianclaudio Malgieri. “The Difficulty of Defining Sensitive Data—The Concept of Sensitive Data in the EU Data Protection Framework.” German Law Journal 22, no. 8 (2021): 1583–1612. https://doi.org/10.1017/glj.2021.79.
Regulation of the National Cyber and Crypto Agency No. 5 of 2024 on National Cybersecurity Action Plan 2024–2028.
Regulation of the National Cyber and Crypto Agency No. 7 of 2023 on Vital Information Infrastructure Identification.
Rendi, Muhammad, Fristia Berdian Tamza, and Ahmad Irzal Fardiansyah. “Perlindungan Data Pribadi dalam Era Digitalisasi dan Tantangan Keamanan Siber di Indonesia.” Jurnal Hukum Lex Generalis 6, no. 12 (2025). https://doi.org/10.56370/jhlg.v6i12.2452.
Rosadi, Sinta Dewi. “Konsep Perlindungan Hukum atas Privasi dan Data Pribadi Dikaitkan dengan Penggunaan Cloud Computing di Indonesia.” Yustisia Jurnal Hukum 5, no. 1 (2016): 35–53. https://doi.org/10.20961/yustisia.v5i1.8712.
Sabadina, Uni. “Politik Hukum Pidana Penanggulangan Kejahatan Teknologi Informasi Terkait Kebocoran Data Pribadi oleh Korporasi Berbasis Online.” Lex Renaissance 6, no. 4 (2021): 799–814. https://doi.org/10.20885/JLR.vol6.iss4.art11.
Sautunnida, Lia. “Urgensi Undang-Undang Perlindungan Data Pribadi di Indonesia: Studi Perbandingan Hukum Inggris dan Malaysia.” Kanun Jurnal Ilmu Hukum 20, no. 2 (2018): 369–384. https://doi.org/10.24815/kanun.v20i2.11159.
Syahrial, Shafira Meutia, Edmon Makarim, Zahrashafa Putri Mahardika, and Ayu Galuh Anggraini. “Pertanggungjawaban Hukum Pemerintah Terhadap Insiden Siber Kebocoran Data Pribadi.” Technology and Economics Law Journal 5, no. 1 (2026): Article 5. https://doi.org/10.21143/TELJ.vol5.no1.1075.
The 1945 Constitution of the Republic of Indonesia.
Yuniarti, Siti. “Perlindungan Hukum Data Pribadi di Indonesia.” Business Economic, Communication, and Social Sciences Journal 1, no. 1 (2019): 147–154. https://doi.org/10.21512/becossjournal.v1i1.6030.
Downloads
Published
Issue
Section
License
Copyright (c) 2026 Fitri Kartika Sari, Salman Salman, Febrian Chandra, Alya Lavina Arken
This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License.
