Legal Protection of Personal Data in The Use of Cyber Security and Artificial Intelligence Against Banking Systems
DOI:
https://doi.org/10.30742/perspektif.v31i3.1035Keywords:
artificial intelligence, personal data, digital banking, cyber security, bank liabilityAbstract
Indonesia has brought convenience to financial transactions, but it has also increased the risk of customer personal data leaks, particularly because banks now rely on cyber security systems and artificial intelligence in Know Your Customer procedures, biometric authentication, and credit scoring. This phenomenon raises concerns about the weak protection of privacy rights and the security of customers’ financial data. This study aims to analyse the forms of legal protection provided to customers against personal data leaks and the criminal law policy governing cybercrime committed through artificial intelligence. This research is normative legal research employing statutory, conceptual, and comparative approaches, with legal materials collected through a literature study of legislation, legal doctrine, and reported cases of data breaches in the national banking sector. The results show that although a national legal framework has been established through Law Number 27 of 2022 concerning Personal Data Protection, the Banking Law, and the regulations of the Financial Services Authority and Bank Indonesia, its implementation is still obstructed by weak law enforcement, the absence of technical benchmarks for data protection by design and for explainable artificial intelligence, unprepared digital banking infrastructure, and low customer awareness. Criminal law policy has likewise not accommodated artificial intelligence as a means of committing crime, which creates a legal vacuum. This study therefore recommends a rebuttable presumption of negligence for banks, explainable artificial intelligence compliance benchmarks, and a lex specialis governing artificial intelligence-based cybercrime.
References
Regulations:
Undang-Undang Republik Indonesia Nomor 10 Tahun 1998 tentang Perubahan atas Undang-Undang Nomor 7 Tahun 1992 tentang Perbankan. (Lembaran Negara Tahun 1998 Nomor 182, Tambahan Lembaran Negara Nomor 3790).
Undang-Undang Republik Indonesia Nomor 11 Tahun 2008 tentang Informasi dan Transaksi Elektronik sebagaimana telah diubah dengan Undang-Undang Nomor 19 Tahun 2016 dan Undang-Undang Nomor 1 Tahun 2024. (Lembaran Negara Tahun 2008 Nomor 58, Tambahan Lembaran Negara Nomor 4843).
Undang-Undang Republik Indonesia Nomor 27 Tahun 2022 tentang Pelindungan Data Pribadi. (Lembaran Negara Tahun 2022 Nomor 198, Tambahan Lembaran Negara Nomor 6820).
Peraturan Otoritas Jasa Keuangan Nomor 12/POJK.03/2021 tentang Bank Umum.
Peraturan Otoritas Jasa Keuangan Nomor 11/POJK.03/2022 tentang Penyelenggaraan Teknologi Informasi oleh Bank Umum.
Books:
Bank Indonesia. Blueprint Sistem Pembayaran Indonesia 2025 BI: Menavigasi Sistem Pembayaran Nasional di Era Digital. Jakarta: Bank Indonesia, 2019.
Budhijanto, Danrivanto. Hukum Pelindungan Data Pribadi di Indonesia: Cyberlaw & Cybersecurity. Bandung: PT. Refika Aditama, 2023.
Goosen, Eric. “The Influence of Law & Regulations on The Process of Digital Transformation at Banks in The Netherlands.” Leiden University, 2020.
Journal Articles:
Amalia, Camila, Esha Gianne Poetry, Mochamad Kemal Kono, Dadang Arief K., and Alex Kurniawan. “Legal Issues of Personal Data Protection and Consumer Protection in Open API Payments.” Journal of Central Banking Law and Institutions 1, no. 2 (2022): 323–52. https://www.ibm.com/security/digital-assets/cost-data-breach-report/1Cost of a Data Breach Report 2020.pdf.
Amirulloh, Muhamad, Eman Suparman, Helitha Novianty Muchtar, and Hetty Hassanah. “Legal Basis and Readiness of the Banking Sector in Implementing Privacy Reliability Certification.” Jurnal IUS Kajian Hukum dan Keadilan 13, no. 3 (2025): 545–58. https://doi.org/10.29303/ius.v13i3.1777.
Csongor, Herke, and David Toth. “Artificial Intelligence in Cybersecurity: Examining Liability, Crime Dynamics, and Preventive Strategies.” EU and Comparative Law Issues and Challenges Series (ECLIC) 8, no. 1 (2024). https://doi.org/10.25234/eclic/32299.
Erlangga, Lytio Enggar, Muhammad Syaroni Rofii, and Eko Daryanto. “The Potential Threat of Artificial Intelligence Use in Cybercrime Activities: A Case Study of 2024 Regional Head Elections.” International Journal of Science and Society 6, no. 4 (2024): 56–67. https://doi.org/10.54783/ijsoc.v6i4.1297.
Kholis, Nur. “Perbankan Dalam Era Baru Digital.” Jurnal Economicus 12, no. 1 (2018): 80–88.
Maulana, Rizki Akbar, and Rani Apriani. “Perlindungan Yuridis Terhadap Data Pribadi Nasabah Dalam Penggunaan Elektronik Banking (e-Banking).” Jurnal Hukum De’rechtsstaat 7, no. 2 (2021): 163–72.
Prameswari, Septiana, and Titik Suharti. “Perlindungan Hukum Terhadap Korban Penipuan Berkedok Undangan Digital Menggunakan Aplikasi Whatsapp [1],[2].” PERSPEKTIF: Kajian Masalah Hukum dan Pembangunan 31, no. 1 (2026): 35–42. https://doi.org/10.30742/perspektif.v31i1.915.
Ramma, Natalia. “Restitution of Victims: Funds as Legal Remedy for Consumer in Illegal Digital Investments.” PERSPEKTIF: Kajian Masalah Hukum dan Pembangunan 31, no. 1 (2026): 43–51. https://doi.org/10.30742/perspektif.v31i1.999.
Supeno, Supeno, Rosmidah Rosmidah, Syed Mohd, and Uzair Iqbal. “Personal Data Protection in Review of Legal Theories and Principles.” Journal of Law & Legal Reform 6, no. 3 (2025): 1349–76. https://doi.org/10.15294/jllr.v6i3.10252.
Syailendra, Moody Rizqy, Gunardi Lie, and Ahmad Sudiro. “Personal Data Protection Law in Indonesia: Challenges and Opportunities.” Indonesia Law Review 14, no. 2 (2024): 56–72. https://doi.org/10.15742/ilrev.v14n2.1.
Tjondro, Elisa, Margaretha Oerip Cintya, Silvia Seto, and Yemima Gracia Suherman. “Do Digital Innovation and Risk Disclosure Control Performance? Evidence from Banking in ASEAN-6.” JIA (Jurnal Ilmiah Akuntansi 6, no. December (2021): 200–220. https://doi.org/10.23887/jia.v6i2.33321.
Wisnubroto, Aloysius, and Hilaire Tegnan. “Preventing AI Crime Towards A New Legal Paradigm: Lessons From United States.” Journal of Human Rights, Culture and Legal System 5, no. 2 (2025): 630–58. https://doi.org/10.53955/jhcls.v5i2.606.
Thesis, Reports, and Internet Sources:
Anugerah, Pijar. “Pinjaman Online: ‘Bagaimana Saya Menjadi Korban Penyalahgunaan Data Pribadi.’” BBC News Indonesia, 2021. https://www.bbc.com/indonesia/majalah-57046585.
IBM Security. Cost of a Data Breach Report 2020. New York, 2020. https://www.ibm.com/security/digital-assets/cost-data-breach-report/1Cost of a Data Breach Report 2020.pdf.
Mediana, and Benediktus Krisna Yogatama. “Data 2 Juta Nasabah Bocor, BRI Life Telusuri Jejak Digital.” kompas.id, 2021. https://www.kompas.id/artikel/data-2-juta-nasabah-bocor-bri-life-telusuri-jejak-digital.
Meidyana, Anggie. “Sindikat Jual Beli Data Pribadi Untuk Judol Terungkap, Korban Diiming-Imingi Jutaan Rupiah.” metrotvnews.com, 2025. https://www.metrotvnews.com/play/kBVC9Qdn-sindikat-jual-beli-data-pribadi-untuk-judol-terungkap-korban-diiming-imingi-jutaan-rupiah.
Otoritas Jasa Keuangan. “Ringkasan Peraturan Otoritas Jasa Keuangan Nomor 12/POJK.03/2021 Tentang Bank Umum.” ojk.go.id, 2022. https://www.ojk.go.id/id/regulasi/Documents/Pages/Bank-Umum/Summary - POJK 12 - 03 - 2021.pdf.
Zeller, Bruno, and Andrew Dahdal. “Open Banking and Open Data in Australia: Global Context, Innovation and Consumer Protection.” Doha, 2021. https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3766076.
Downloads
Published
Issue
Section
License
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
Authors who publish with this journal agree to the following terms:
- Authors retain copyright and grant the journal right of first publication with the work simultaneously licensed under a Attribution-ShareAlike 4.0 International (CC BY-SA 4.0) License that allows others to share the work with an acknowledgement of the work's authorship and initial publication in this journal.
- Authors are able to enter into separate, additional contractual arrangements for the non-exclusive distribution of the journal's published version of the work (e.g., post it to an institutional repository or publish it in a book), with an acknowledgement of its initial publication in this journal.
- Authors are permitted and encouraged to post their work online (e.g., in institutional repositories or on their website) prior to and during the submission process, as it can lead to productive exchanges, as well as earlier and greater citation of published work (See The Effect of Open Access).
The Authors submitting a manuscript do so on the understanding that if accepted for publication, copyright of the article shall be assigned to jurnal PERSPEKTIF and Research Institutions and Community Service, Wijaya Kusuma Surabaya University as publisher of the journal.
