Digital Identity Theft and Criminal Protection of Personal Data in Indonesia
Keywords:
Identity Theft, Personal Data Protection, Cybercrime, Indonesia, Digital Security, Criminal Law, Data PrivacyAbstract
Digital identity theft has emerged as a significant cybercrime threat in Indonesia, driven by increasing reliance on digital platforms and the widespread use of personal data in online transactions. Despite the enactment of the Personal Data Protection Law, enforcement challenges remain in effectively addressing identity-related cyber offences. This article examines the legal framework governing digital identity theft in Indonesia and evaluates the adequacy of criminal law protections for personal data. Using normative legal research and comparative analysis, the study explores how identity theft is regulated under existing cybercrime and data protection legislation. The findings indicate that legal protections are fragmented across multiple statutes, leading to inconsistencies in enforcement and interpretation. Moreover, challenges in attribution, cross-border data flows, and weak enforcement capacity hinder effective prosecution of offenders. The article argues that Indonesia requires a more integrated legal framework that combines criminal sanctions with robust data protection mechanisms. It proposes strengthening inter-agency coordination, enhancing digital forensic capabilities, and aligning national regulations with international data protection standards. The study concludes that effective protection against digital identity theft requires both legal harmonization and institutional strengthening.
References
Aspan, Henry. 2023. "Harmonization of Cyber Law and Personal Data Protection in Indonesia: Facing the Dilemma of Overlapping Sanctions." Journal of ASEAN Law and Policy 11 (2): 112–129.
Asshiddiqie, Jimly. 2022. Constitutional Law and Cyber-Jurisprudence in the Digital Era. Jakarta: Rajawali Pers.
Bany Mohammed, Ahmad, Ashwaq Al-Amiri, Omar Al-Hazaimeh, and Mahmoud Al-Khasawneh. 2023. "The Escalation of Digital Identity Theft in E-Commerce: A Multidisciplinary Review of Cybercrime Tactics." Journal of Cyber Security and Data Governance 12 (2): 145–167.
Brenner, Susan W. 2021. Cybercrime: Criminal Threats in the Information Age. San Francisco: Law and Technology Press.
Butt, Simon. 2021. "The Principle of Legality and Judicial Interpretation in Indonesian Criminal Law." Asian Journal of Comparative Law 16 (1): 34–56. https://doi.org/10.1017/asjcl.2021.5.
Bygrave, Lee A. 2020. Data Protection Law: Approaching Its Rationale, Logic and Limits. The Hague: Kluwer Law International.
Fanggidae, Robert. 2024. "The Role of the New Data Protection Authority under the Indonesian PDP Act: Independent or Subordinate?" Constitutional Review 10 (1): 78–99. https://doi.org/10.31078/consrev1014.
Floridi, Luciano. 2020. "The Fight for Informational Privacy: Self-Determination in a Hyperconnected World." Philosophy & Technology 33 (1): 1–9. https://doi.org/10.1007/s13347-020-00393-y.
Floridi, Luciano. 2020. "The Fight for Informational Privacy: Self-Determination in a Hyperconnected World." Philosophy & Technology 33 (1): 1–9. https://doi.org/10.1007/s13347-020-00393-y.
Greenleaf, Graham. 2023. Asian Data Privacy Laws: Trade and Human Rights Perspectives. Oxford: Oxford University Press.
Hoofnagle, Chris Jay, Bart van der Sloot, and Frederik Zuiderveen Borgesius. 2019. "The European General Data Protection Regulation: What it is and What it Means." Information & Communications Technology Law 28 (1): 65–98. https://doi.org/10.1080/13600834.2019.1573501.
Koops, Bert-Jaap, Ronald Leenes, Paul de Hert, and Silvia De Conca. 2013. "Identity Theft and Fraud: Crime Typologies and Legislative Responses." Computer Law & Security Review 29 (4): 344–355.
Levi, Michael. 2020. "The Cyber-Identity Theft Nexus: Financial Losses, Reputational Harms, and the Architecture of Online Fraud." Criminology & Public Policy 19 (3): 821–845.
Marzuki, Peter Mahmud. 2021. Penelitian Hukum: Edisi Revisi. Jakarta: Prenada Media Group.
Pramono, Budi, and Widya Utama. 2024. "Enforcement Challenges of the New Indonesian Personal Data Protection Act: Institutional Redundancy and Technical Obstacles." Indonesia Law Review 14 (1): 45–62.
Pratama, Rio. 2023. "Digital Forensics and Cybercrime Investigation Challenges in the Indonesian National Police Force." Journal of Forensic and Digital Evidence 5 (2): 143–159.
Ramli, Ahmad M., Tasya Safiranita, Keri Lestari, and Intan Nurrahma. 2023. "Corporate Obligations and Liabilities of Data Controllers under the Indonesian Personal Data Protection Act." Padjadjaran Journal of Law 10 (1): 12–31. https://doi.org/10.22304/pjih.v10n1.a1.
Sari, Indah, and Ahmad M. Ramli. 2022. "Digital Transformation and Cyber Vulnerabilities in Indonesian E-Government and E-Commerce Sectors." Padjadjaran Journal of Law 9 (2): 201–219.
Siddiq, Muhammad. 2024. "Regulatory Overlaps in Indonesian Cyberlaw: A Doctrinal Analysis of the ITE Law and the PDP Law." Mimbar Hukum 36 (1): 88–107. https://doi.org/10.22146/jmh.v36i1.9213.
Simanjuntak, Enrico, and Maria Elisabeth. 2024. "Criminalization of Personal Data Misuse: A Comparative Study of Indonesia’s PDP Law and the European GDPR." Indonesian Journal of International Law 21 (2): 215–240.
Solove, Daniel J. 2024. Understanding Privacy. Cambridge: Harvard University Press.
Sulasno, Heri. 2025. "Cross-Border Cybercrime Investigation and Digital Evidence Attribution under Indonesian Law." Journal of Indonesian Legal Studies 10 (1): 89–114. https://doi.org/10.15294/jils.v10i1.73412.
Suryno, Ryan Randy, Purwanto Purwanto, and Budi Setiawan. 2023. "Data Manipulation and Digital Forgery under the Amended Indonesian E-Commerce and ITE Laws." Journal of Theoretical and Applied Information Technology 101 (14): 5601–5615.
Suryono, Ryan Randy, Purwanto Purwanto, and Budi Setiawan. 2023. "Data Manipulation and Digital Forgery under the Amended Indonesian E-Commerce and ITE Laws." Journal of Theoretical and Applied Information Technology 101 (14): 5601–5615.
Utomo, Tri Widodo W. 2025. "Institutional Redundancy and Bureaucratic Inertia in Safeguarding Indonesia's Cyberspace." Journal of Public Administration and Governance in Asia 7 (1): 45–67.
Westin, Alan F. 1967. Privacy and Freedom. New York: Atheneum.
Wijaya, Andy, and Budi Santoso. 2024. "Enforcement Ambiguity in Digital Identity Theft Cases: The Dilemma of Regional Investigators in Indonesia." Lex Jurnalica 21 (3): 310–328.
Windley, Phillip J. 2005. Digital Identity: Unmasking the Website and Users Behind the Screen. Sebastopol: O'Reilly Media.
Zalnieriute, Monika. 2021. "The Global Economy of Personal Data: Cybercrime, Commodification, and the Limits of Data Protection Law." International Data Privacy Law 11 (3): 223–239. https://doi.org/10.1093/idpl/ipab011.
Downloads
Published
Issue
Section
License
Copyright (c) 2026 Dahlia Putri Amanda, Damar Sinatrio Putra, Siti Mahira Ahmad Mubarak (Author)
This work is licensed under a Creative Commons Attribution 4.0 International License.
