Perlindungan Hukum Data Pribadi Terhadap Korban Kejahatan Akses Ilegal dan Upaya Pencegahannya

Abstract. The digital era brings cyber challenges such as hacking and personal data leaks. The PDNS and BKN cases show the urgency of data protection. Law No. 27 of 2022 is present as an important legal basis to protect public privacy and prevent data misuse. This study uses a normative legal method with descriptive analysis of secondary data. The data is analyzed qualitatively and uses a deductive approach to draw conclusions regarding the legal protection of personal data and the prevention of illegal access crimes. Personal data protection needs to be optimized preventively (system strengthening, regulation, education) and repressively (law enforcement, restoration of victims' rights). Recent cases indicate that legal protection is not yet optimal, so the state needs to be more assertive in implementing the PDP Law. Personal data protection is a constitutional right that requires an integrated approach through regulation, law enforcement, public education, and individual control. The implementation of the Law still needs to be optimized with derivative regulations and implementing institutions, as well as effectiveness studies, technical standards, reporting systems, and digital literacy to minimize the risk of crime, protect victims, and enforce privacy rights. Abstrak. Era digital membawa tantangan siber seperti peretasan dan kebocoran data pribadi. Kasus PDNS dan BKN menunjukkan urgensi perlindungan data. UU No. 27 Tahun 2022 hadir sebagai landasan hukum penting untuk melindungi privasi masyarakat dan mencegah penyalahgunaan data. Penelitian ini menggunakan metode yuridis normatif dengan analisis deskriptif dari data sekunder. Data dianalisis kualitatif dan menggunakan pendekatan deduktif untuk menarik kesimpulan mengenai perlindungan hukum data pribadi dan pencegahan kejahatan akses ilegal. Perlindungan data pribadi perlu dioptimalkan secara preventif (penguatan sistem, regulasi, edukasi) dan represif (penegakan hukum, pemulihan hak korban). Kasus-kasus terbaru mengindikasikan perlindungan hukum belum maksimal, sehingga negara perlu lebih tegas mengimplementasikan UU PDP. Perlindungan data pribadi adalah hak konstitusional yang memerlukan pendekatan terintegrasi melalui regulasi, penegakan hukum, edukasi publik, dan kontrol individu. Implementasi UU masih perlu dioptimalkan dengan aturan turunan dan lembaga pelaksana, serta kajian efektivitas, standar teknis, sistem pelaporan, dan literasi digital untuk meminimalkan risiko kejahatan, melindungi korban, dan menegakkan hak privasi.