Kelemahan Pertanggungjawaban Negara dalam Kasus Gangguan Pusat Data Nasional Tahun 2024 di Indonesia

Abstract

The 2024 National Data Center (Pusat Data Nasional/PDN) disruption caused significant interruptions to digital public services and raised concerns regarding the protection of personal data in Indonesia. This study aims to analyze the legal framework governing state responsibility in personal data protection and electronic systems, as well as to examine the weaknesses of state responsibility in the 2024 National Data Center disruption case. This research employs a normative legal research method using statutory and conceptual approaches. The study relies on primary, secondary, and tertiary legal materials collected through library research and analyzed qualitatively. The findings indicate that Indonesia has established an adequate legal framework for personal data protection and electronic system governance. However, weaknesses remain in cybersecurity implementation, information security governance, risk mitigation, and accountability mechanisms. From an ethical hacker perspective, strengthening national cybersecurity requires the implementation of security by design, defense in depth, and continuous security testing.