Legal Effectiveness of Data Protection and Cybersecurity Frameworks in Indonesia: TheEnforcement and Compliance Gap

Abstract

The effectiveness of data protection and cybersecurity legal
frameworks has become a critical issue in digital
governance, particularly in developing countries such as
Indonesia. Although regulatory instruments such as the
Personal Data Protection Law and the Electronic
Information and Transactions Law provide a formal legal
foundation, their practical effectiveness remains limited.
This study examines how these frameworks address digital
risks and analyzes the urgency of strengthening
enforcement and compliance mechanisms. Using a
normative juridical method combined with systematic and
sociological approaches, the study evaluates the relationship
between legal norms and their implementation. The
findings indicate that regulatory frameworks exist but fail to
achieve optimal effectiveness due to weak enforcement, low
compliance, and institutional fragmentation. This condition
creates a persistent gap between legal objectives and actual
outcomes, allowing cybersecurity risks and data breaches to
continue. Strengthening enforcement capacity, improving
institutional coordination, and enhancing compliance
mechanisms are therefore essential to ensure effective
cybersecurity governance in Indonesia.