Implikasi Hukum dan Pertanggungjawaban Pidana dalam Kasus Kebocoran Data Pribadi

Personal data leakage has become a serious legal issue in the digital era due to its increasing frequency and adverse impacts, including financial losses, identity theft, and privacy violations. Between 2019 and mid-2024, Indonesia experienced numerous personal data breach incidents, indicating that enforcement of personal data protection laws remains ineffective despite the enactment of Law Number 27 of 2022 concerning Personal Data Protection (PDP Law). This study analyzes the legal framework governing criminal liability for perpetrators of personal data leakage and examines challenges in enforcing these regulations in Indonesia. This research employs normative legal methods using statutory, conceptual, and case approaches. Legal materials include primary sources, particularly the PDP Law, Electronic Information and Transactions Law (ITE Law), Criminal Code (KUHP), Civil Code (KUHPerdata), and related regulations, supported by secondary legal materials from books and scholarly literature. The findings indicate that Indonesia has established a comprehensive legal framework through the PDP Law as a lex specialis, supported by the ITE Law, Article 322 of the Criminal Code, and Article 1365 of the Civil Code. However, enforcement faces obstacles, including limited digital forensic capacity, insufficient law enforcement expertise, low public legal awareness, the absence of an effective independent data protection authority, and the complexity of cross-border cybercrime. This study recommends strengthening the independent data protection supervisory authority, digital forensic capacity, cybersecurity training, and public legal awareness to improve personal data protection and criminal law enforcement in Indonesia.