Regulatory Challenges in Enforcing Cybersecurity and Data Protection Laws in the DigitalTransformation Era

Abstract

The rapid growth of digital transformation has significantly increased cybersecurity risks, particularly in the protection of personal data within information systems. In Indonesia, the enactment of Law Number 27 of 2022 on Personal Data Protection represents a crucial legal framework aimed at addressing these challenges; however, its practical implementation remains problematic. This study aims to analyze the effectiveness of cybersecurity and data protection regulations and to examine the urgency of strengthening these legal frameworks in the digital era. The research employs a normative legal method with statutory, conceptual, comparative, and limited sociological approaches, utilizing primary, secondary, and tertiary legal materials. The findings indicate that although existing regulations are normatively adequate and aligned with global standards, their effectiveness is hindered by weak
enforcement mechanisms, regulatory fragmentation, and increasing technological complexity. Furthermore, the
urgency to strengthen these regulations is driven by escalating cyber threats, the need to protect individual privacy rights, and the importance of maintaining economic and national resilience.