Reconstructing Digital Sovereignty through State Resilience Legal Policy: Citizen Protection after the Cyberattack on Indonesia’s Temporary National Data Center
DOI:
https://doi.org/10.38035/sijal.v4i2.432Keywords:
Artificial Intelligence, Citizen Protection, Digital Sovereignty, Legal Policy, State ResilienceAbstract
The development of information technology and Artificial Intelligence (AI) has shifted the paradigm of state resilience away from protection oriented toward territorial areas and toward the protection of a borderless digital space. This shift presents new challenges for the state in protecting its citizens, as reflected in the cyberattack on Indonesia's Temporary National Data Center (PDNS) in 2024. Although Indonesia already has various regulations concerning information technology, cybersecurity, and personal data protection, national legal policy has not yet been fully able to build an integrated framework to respond to digital threats in the AI era. This research aims to analyze the legal policy of state resilience in protecting citizens through a case study of the cyberattack on PDNS, and to reconstruct legal policy based on Digital Sovereignty as a paradigm for strengthening state resilience. This research uses the normative legal research method with statutory, conceptual, and case approaches. The results show that the national legal framework remains sectoral in nature and has not been able to comprehensively integrate cybersecurity governance, data protection, and the use of AI. Therefore, this research offers a reconstruction of legal policy based on Digital Sovereignty, which places control over data, digital infrastructure, cybersecurity, and AI governance as a new foundation for strengthening state resilience while guaranteeing the protection of citizens' constitutional rights in the era of digital transformation. The proposed model integrates data sovereignty, infrastructure resilience, AI accountability, supply chain security, and digital human capacity through preventive, adaptive, rights based governance mechanisms for public institutions.
References
Asshiddiqie, J. (2010). Konstitusi dan konstitusionalisme Indonesia. Sinar Grafika.
Baldoni, R. (2024). Charting digital sovereignty: A survival playbook. Springer Nature Switzerland.
Bodin, J. (1992). On sovereignty. Cambridge University Press.
Buzan, B. (1991). People, states and fear: An agenda for international security studies in the post-Cold War era (2nd ed.). Lynne Rienner Publishers.
Constitution of the Republic of Indonesia. (1945).
Cyber Security Agency of Singapore. (2024). Singapore cyber landscape 2024.
European Union Agency for Cybersecurity. (2024). ENISA threat landscape 2024. Publications Office of the European Union.
Financial and Development Supervisory Agency. (2024). Evaluasi tata kelola Pusat Data Nasional. BPKP.
Government Regulation Number 71 of 2019 concerning the operation of electronic systems and transactions. (2019).
Krasner, S. D. (1999). Sovereignty: Organized hypocrisy. Princeton University Press.
Kusumaatmadja, M. (2006). Konsep-konsep hukum dalam pembangunan. Alumni.
Law Number 1 of 2024 concerning the second amendment to Law Number 11 of 2008 concerning electronic information and transactions. (2024).
Law Number 27 of 2022 concerning personal data protection. (2022).
Mahfud MD. (2009). Politik hukum di Indonesia. Rajawali Pers.
Mahfud MD. (2022). Politik hukum di Indonesia. Rajawali Pers.
Ministry of Communication and Informatics of the Republic of Indonesia. (2024a, June). Konferensi pers penanganan gangguan Pusat Data Nasional Sementara.
Ministry of Communication and Informatics of the Republic of Indonesia. (2024b, June 24). Siaran pers Nomor 373/HM/KOMINFO/06/2024 tentang perkembangan penanganan gangguan Pusat Data Nasional Sementara.
National Cyber and Crypto Agency. (2024a). Laporan evaluasi insiden Pusat Data Nasional Sementara tahun 2024.
National Cyber and Crypto Agency. (2024b). Laporan tahunan BSSN 2024.
National Cyber Security Index. (2024). National cyber security index 2024. e-Governance Academy Foundation.
National Institute of Standards and Technology. (2023). Artificial intelligence risk management framework (AI RMF 1.0). U.S. Department of Commerce.
National Institute of Standards and Technology. (2024). Cybersecurity framework (CSF) 2.0. U.S. Department of Commerce.
Nye, J. S., Jr. (2011). The future of power. PublicAffairs.
Organisation for Economic Co-operation and Development. (2019). Data governance in the public sector. OECD Publishing.
Organisation for Economic Co-operation and Development. (2022a). OECD framework for the classification of AI systems. OECD Publishing.
Organisation for Economic Co-operation and Development. (2022b). Classifying AI systems (OECD Artificial Intelligence Papers No. 8). OECD Publishing.
Organisation for Economic Co-operation and Development. (2022c). Data governance in the digital age. OECD Publishing.
Rahardjo, S. (2006). Ilmu hukum. Citra Aditya Bakti.
Rahardjo, S. (2014). Ilmu hukum. Citra Aditya Bakti.
UNESCO. (2021). Recommendation on the ethics of artificial intelligence.
World Economic Forum. (2025). Global cybersecurity outlook 2025.
Downloads
Published
How to Cite
Issue
Section
License
Copyright (c) 2026 Dian Priheryanti Havid, Laksanto Utomo, R. Lina Sinaulan
This work is licensed under a Creative Commons Attribution 4.0 International License.
Copyright :
Authors who publish their manuscripts in this journal agree to the following conditions:
- Copyright in each article belongs to the author.
- The author acknowledges that the Siber International Journal of Advanced Law (SIJAL) has the right to be the first to publish under a Creative Commons Attribution 4.0 International license (Attribution 4.0 International CC BY 4.0).
- Authors can submit articles separately, arrange the non-exclusive distribution of manuscripts that have been published in this journal to other versions (for example, sent to the author's institutional repository, publication in a book, etc.), by acknowledging that the manuscript has been published for the first time at SIJAL.
