Building Digital Justice: Reinterpreting Ḥifẓ al-ʿIrḍ in Personal Data Protection and Legal Aid for Data Breach Victims in Indonesia

Ika Pusparini Anindita Jayasinga; Agus Triono; Muhammad Akib; Elfa Murdiana; Muhimmatul Mukaromah

doi:10.21154/justicia.v23i2.13432

Authors

Ika Pusparini Anindita Jayasinga Universitas Lampung https://orcid.org/0009-0002-8145-1550
Agus Triono Universitas Lampung https://orcid.org/0000-0002-8115-0195
Muhammad Akib Universitas Lampung https://orcid.org/0000-0001-6777-7891
Elfa Murdiana UIN Jurai Siwo Metro, Lampung https://orcid.org/0000-0002-5032-7314
Muhimmatul Mukaromah International Islamic University Malaysia https://orcid.org/0000-0002-7416-4927

DOI:

https://doi.org/10.21154/justicia.v23i2.13432

Keywords:

personal data protection, legal aid, digital justice

Abstract

This article examines the systemic failure of personal data protection in Indonesia as an issue that goes beyond technical and regulatory shortcomings and touches the very core of human dignity. Although Law No. 27 of 2022 on Personal Data Protection has provided normative consolidation, the legal ecosystem underpinning it remains fragile: a non-independent supervisory body, structurally weak enforcement mechanisms, and systemic inequities in access to justice render data subjects' rights illusory. This article employs a normative-empirical method with three complementary approaches: the legal philosophy approach is used to deconstruct the paradigmatic assumptions underpinning the data protection regime and reconstruct it on the foundation of human dignity; the conceptual approach is used to redefine ʿirḍ from social reputation toward digital identity and data sovereignty; and the maqāṣid al-sharīa approach within Jasser Auda’s framework is used to assess the normative adequacy of the existing regime and to construct an argument that data protection must be classified as ḍarūriyyāt—a primary necessity—because its violation simultaneously threatens ḥifẓ al-nafs, ḥifẓ al-ʿaql, ḥifẓ al-māl, and ḥifẓ al-ʿirḍ. Based on these findings, this article proposes a Maqasid-Oriented Legal Aid (MOLA) model that operates across three dimensions: restorative, preventive-structural, and community-based accessibility. The main contribution of this article is the redefinition of data protection as an active and affirmative mandate of ḥifẓ al-ʿirḍ, while also offering a framework for legal aid that is normatively robust and institutionally realistic in the Indonesian context.

References

A, Prabha, Beulah Shekhar, and Ameenul Abdullah K S. “Mapping Cybercrime Victimization: A Review of Psychological, Social and Economic Impacts.” International Journal For Multidisciplinary Research 7, no. 6 (December 2025). https://doi.org/10.36948/ijfmr.2025.v07i06.65150.

Al, muhammad deniardi et al. “criminal law arrangements in indonesia related to judicial review.” Russian Law Journal 11, no. 3 (April 2023). https://doi.org/10.52783/rlj.v11i3.1835.

Al-Farjani, Saleh Hashem, and Waheed Alazhari. “Bridging Law, Technology, and Justice in the Digital Age.” INDONESIAN JOURNAL OF SUSTAINABILITY 5, no. 1 (February 2026): 37. https://doi.org/10.30659/ijsunissula.5.1.37-49.

Al-Fatih, Sholahuddin, and Zaka Firma Aditya. “The legal protection against terrorism suspects in Indonesia (case study of the arrest process of terrorism suspects by Densus 88).” Legality : Jurnal Ilmiah Hukum 27, no. 1 (July 2019): 14–26.

Al-Fatih, Sholahuddin, Zaka Firma Aditya, Abdul Basid Fuadi, and Muhammad Nur. “Academic Freedom of Expression in Indonesia: A Maqashid Sharia Notes.” El-Mashlahah 13, no. 2 (December 2023): 203–24. https://doi.org/10.23971/el-mashlahah.v13i2.7573.

Al-Turabi, Uthman Mehdad, and Jasser Auda. “Toward a Maqāṣid-Based Legal Reform: Systemic Thinking for Social Transformation in the Modern Muslim World.” Indonesian Journal of Islamic Law 8, no. 2 (December 2025): 209–28. https://doi.org/10.35719/fhw10v84.

An Nisya Nursabilah, Nazmi Viranha Khurulani, Anggia Prasanti, Dea Aulia Zuhra, Allyah Alicia Hg, and Nabila Nabanurohmah. “Perlindungan Hukum Bagi Korban Tindak Pidana Cyber Scam Serta Dampaknya Bagi Korban Sebagai Bentuk Viktimisasi Sekunder.” Hukum Inovatif : Jurnal Ilmu Hukum Sosial Dan Humaniora 2, no. 3 (June 2025): 168–87. https://doi.org/10.62383/humif.v2i3.1912.

Anshori, Teguh. “Menuju Fiqih Progresif (Fiqih Modern Berdasarkan Maqashid Al Syariah Perspektif Jaser Auda).” Al-Syakhsiyyah: Journal of Law and Family Studies 2, no. 1 (June 2020): 168–81. https://doi.org/10.21154/syakhsiyyah.v2i1.2166.

Arliana Agustin, Faridhatul Shima, and Lukman Santoso. “Right of Access to Legal Aid for the Poor: Study of Islamic Civil Cases in the PA Ponorogo Legal Area.” Istinbath : Jurnal Hukum 21, no. 1 (July 2024): 19–39. https://doi.org/10.32332/3hw8f526.

Arminsyah, Arminsyah. “Maqasid Al-Shariah in Contemporary Legal Systems: An Analysis of Digital Rights and Privacy Protection.” Al-Qadha : Jurnal Hukum Islam Dan Perundang-Undangan 12, no. 2 (July 2025): 289–308. https://doi.org/10.32505/qadha.v12i2.11178.

Aryo Putranto. “Kebocoran Data 6 Juta Wajib Pajak Termasuk Jokowi Diklaim Ulah Peretas Bjorka.” Kompas.Com (Jakarta), 2024.

Asyari, Haekal Al. “Between Freedom And Protection: A Critical Review Of Indonesia’S Cyberspace Law.” Prophetic Law Review, July 4, 2023, 79–103. https://doi.org/10.20885/PLR.vol5.iss1.art5.

Azizah, Imroatul, Lisa Aminatul Mukaromah, Khurul Anam, Sanuri Sanuri, and Nafi’ Mubarok. “Digitalization and Cyberfeminism: Reinterpreting Islamic Criminal Law for Gender Equality and Women’s Rights.” Volksgeist: Jurnal Ilmu Hukum dan Konstitusi, May 17, 2026, 127–43. https://doi.org/10.24090/volksgeist.v9i1.15378.

BBC News. “Aadhaar: ‘Leak’ in World’s Biggest Database Worries Indians.” 2018. https://www.bbc.com/news/world-asia-india-42575443.

BBC.News Indonesia. “Pusat Data Nasional Sementara Lumpuh Akibat Ransomware, Mengapa Instansi Pemerintah Masih Rentan Terhadap Serangan Siber?” 2024. https://www.bbc.com/indonesia/articles/cxee2985jrvo.

Buitelaar, J. C. “Post-Mortem Privacy and Informational Self-Determination.” Ethics and Information Technology 19, no. 2 (June 2017): 129–42. https://doi.org/10.1007/s10676-017-9421-9.

Chanifah, Nur, Fahd bin Mohana bin Salim al-Ahmadi, Abu Samsudin, Nurul Islami, and Muhammad Najih Vargholy. “The Digitalization of Employment, Fiqh Education and Empowerment of Migrant Workers’ Rights.” Justicia Islamica 23, no. 1 (March 2026): 253–84. https://doi.org/10.21154/justicia.v23i1.12454.

Chesnokova, Lesya. “Information Privacy: Protecting Freedom and Individual Autonomy.” The Digital Scholar Philosopher's Lab 4, no. 2 (2021): 145–57. https://doi.org/10.32326/2618-9267-2021-4-2-145-157.

Damayanti, Desy, Rahma Hasna Naziha, and Cucu Surahman. “Perspektif Hukum Islam Terhadap Perlindungan Data Pribadi Di Era Digital.” Al-Battar: Jurnal Pamungkas Hukum 1, no. 3 (December 2024): 151–63. https://doi.org/10.63142/xzd65n65.

Darmawan, Fendi, and Henry Arianto. “Upaya Perlindungan Hukum Dan Tanggung Jawab Kemkomdigi Terhadap Korban Kebocoran Data Pribadi Di Indonesia.” Arus Jurnal Sosial dan Humaniora 5, no. 3 (December 2025): 3678–88. https://doi.org/10.57250/ajsh.v5i3.1741.

Desy Damayanti, Rahma Hasna Naziha, and Cucu Surahman. “Perspektif Hukum Islam Terhadap Perlindungan Data Pribadi Di Era Digital.” Al-Battar: Jurnal Pamungkas Hukum 1, no. 3 (2024): 151–63. https://doi.org/10.63142/xzd65n65.

Devyani Nighoskar. “Are Our Aadhaar Identities Available On WhatsApp For Just Rs. 500?” Homegrown, 2021. https://homegrown.co.in/homegrown-explore/are-our-aadhar-identities-available-on-whatsapp-for-just-rs-500.

Evans, Mark, Ying He, Leandros Maglaras, Iryna Yevseyeva, and Helge Janicke. “Evaluating Information Security Core Human Error Causes (IS-CHEC) Technique in Public Sector and Comparison with the Private Sector.” International Journal of Medical Informatics 127 (July 2019): 109–19. https://doi.org/10.1016/j.ijmedinf.2019.04.019.

Fad, Mohammad Farid. “Perlindungan Data Pribadi Dalam Perspektif Sadd Dzari’ah.” Muamalatuna 13, no. 1 (June 2021): 33. https://doi.org/10.37035/mua.v13i1.4674.

Fatarib, Husnul, Zezen Zainul Ali, Nur Aziz Arifin, Abdul Najib, and Muhammad Nur Fathoni. “Progressive Legal Reasoning in Contemporary Islamic Legal Reform: Negotiating the Maqāṣid and Hermeneutic Approaches.” JURIS (Jurnal Ilmiah Syariah) 24, no. 2 (December 2025): 277–94. https://doi.org/10.31958/juris.v24i2.16123.

Ghafur, Saira, Emilia Grass, Nick R. Jennings, and Ara Darzi. “The Challenges of Cybersecurity in Health Care: The UK National Health Service as a Case Study.” The Lancet Digital Health 1, no. 1 (May 2019): e10–12. https://doi.org/10.1016/S2589-7500(19)30005-6.

Gibson, Dennis, and Clive Harfield. “Amplifying Victim Vulnerability: Unanticipated Harm and Consequence in Data Breach Notification Policy.” International Review of Victimology 29, no. 3 (September 2023): 341–65. https://doi.org/10.1177/02697580221107683.

Goldfus, Yuval. “Tell Me Who Your Friends Are, and I’ll Tell You Who You Are: Privacy and the Social Self.” SSRN Electronic Journal, ahead of print, 2023. https://doi.org/10.2139/ssrn.4539608.

Gstrein, Oskar J., and Anne Beaulieu. “How to Protect Privacy in a Datafied Society? A Presentation of Multiple Legal and Conceptual Approaches.” Philosophy & Technology 35, no. 1 (March 2022): 3. https://doi.org/10.1007/s13347-022-00497-4.

Hildebrandt, Mireille. “The Fundamental Right of Data Protection.” In Smart Technologies and the End(s) of Law, 186–213. Edward Elgar Publishing, 2015. https://doi.org/10.4337/9781849808774.00017.

Huda, Uu Nurul, Dian Rachmat Gumelar, and Alwi Al Hadad. “Fortifying Democracy: Deploying Electoral Justice for Robust Personal Data Protection in the Indonesian Election.” Khazanah Hukum 6, no. 1 (March 2024): 24–33. https://doi.org/10.15575/kh.v6i1.30734.

Iskandar. “Data Pemerintah Dominasi 58 Persen Kebocoran Di Dark Web, Platform Baru Ini Tawarkan Deteksi Dini.” Liputan6.com (Jakarta), 2025.

Jasser Auda. Maqasid Al-Shariah as Philosophy of Islamic Law: A Systems Approach. International Institute of Islamic Thought (IIIT), 2008.

Jung, Chea Yun, and Hyun Kyong Joo. “Post-‘Lee-Luda’ Personal Information Protection in Korea: Developer Responsibility and Autonomous AI Governance.” International Data Privacy Law 13, no. 2 (June 2023): 154–67. https://doi.org/10.1093/idpl/ipad006.

Kang, Na-Mi, and Sang-Jin Park. “Strategies to Enhance the Effectiveness of One-Stop Solution Centers for Crime Victims.” The Korean Association for Terrorism Studies 18, no. 2 (June 2025): 74–93. https://doi.org/10.46350/KATS.2025.18.2.74.

Knetsch, Jonas. “The Compensation of Non-Pecuniary Loss in GDPR Infringement Cases.” Journal of European Tort Law 13, no. 2 (August 2022): 132–53. https://doi.org/10.1515/jetl-2022-0008.

Kurdi, Kurdi, and Joko Cahyono. “Perlindungan Data Pribadi Di Era Digital Berdasarkan Undang-Undang Nomor 27 Tahun 2022.” JUNCTO: Jurnal Ilmiah Hukum 6, no. 2 (December 2024): 330–39. https://doi.org/10.31289/juncto.v6i2.5443.

Maharani, Rista, and Andria Luhur Prakoso. “Perlindungan Data Pribadi Konsumen Oleh Penyelenggara Sistem Elektronik Dalam Transaksi Digital.” JURNAL USM LAW REVIEW 7, no. 1 (March 2024): 333–47. https://doi.org/10.26623/julr.v7i1.8705.

Mailiena, Cristine, and M. Ilham Tanzilulloh. “Normativity of Consumer Protection in the Perspective of Maqāṣid Sharīʿah.” Invest Journal of Sharia & Economic Law 4, no. 1 (August 2024): 176–88. https://doi.org/10.21154/invest.v4i1.9004.

Muzakkie, Shohiban Azkaa, and Eka Juarsa. “Perlindungan Hukum Terhadap Penyalahgunaan Data Pribadi Pada Aplikasi Pinjaman Online Ilegal Menurut Undang-Undang No 27 Tahun 2022 Tentang Perlindungan Data Pribadi.” Bandung Conference Series: Law Studies 3, no. 2 (August 2023): 984–87. https://doi.org/10.29313/bcsls.v3i2.7284.

Najlaa Flayyih, Mohammed Hasson Ali, Ahmad Fadii, and Khaled Aljasmi. “The Right to Informational Self-Determination between Legislation and Implementation.” Access to Justice in Eastern Europe 8, no. 3 (2025): 362–89. https://doi.org/10.33327/AJEE-18-8.3-a000116.

Nidhom, Misbahun, and Ali Murtadho. “Does Islam Protect Digital Privacy? An Islamic Studies Approach to Personal Data Protection.” Al-Afham: Journal of Islamic Studies 2, no. 2 (November 2025): 107–28. https://doi.org/10.62509/ajis.v2i2.260.

Nišević, Maja, and Aleksandra Ivanković. “Secondary Victimization through Data Protection: Balancing Victim Privacy and Support in the EU Legal Framework.” International Review of Victimology 32, no. 1 (January 2026): 65–82. https://doi.org/10.1177/02697580251374719.

Nurani, Nina, Apriwandi Apriwandi, and Hafied Noor Bagja. “Intellectual Property Rights Law Reform Based on Maqāṣid Al-Sharī‘ah as a Model for Green Business-Based Creative Industry Protection to Support Sustainable Development.” De Jure: Jurnal Hukum Dan Syar’iah 18, no. 1 (February 2026): 1–32. https://doi.org/10.18860/j-fsh.v18i1.40840.

Nurulita, Fitri, Neilta Melikiati, Maulana Achsan Al Farisi, and Muhamad Alvian. “Sacred Law in Secular Systems: Shariawiz and Digital Inheritance Fiqh among Muslim Minorities in the United States.” Asy-Syir’ah: Jurnal Ilmu Syari’ah dan Hukum 59, no. 2 (2025): 252–73. https://doi.org/10.14421/ajish.v59i2.1642.

Okonkwo, Obioma Adesewa. “Structural Asymmetries in Data Ownership, Access to Information, and Human Rights Enforcement across Global Digital Governance Regimes.” World Journal of Advanced Research and Reviews 4, no. 2 (December 2019): 238–55. https://doi.org/10.30574/wjarr.2019.4.2.0151.

Putra, Rengga Kusuma, Yulia Agustin, Latif Nurul Ihsan, and Zaki Ahmad Dafiqi. “Institutional Dysfunction in Personal Data Protection: A Legal-Political Analysis Based on New Institutional Theory.” Perkara : Jurnal Ilmu Hukum Dan Politik 3, no. 2 (June 2025): 938–49. https://doi.org/10.51903/bkktey52.

Rahmadani, Siti, and Rina Arum Prastyanti. “Human Rights and Cybersecurity: Reinforcing Legal Protections for Personal Data.” International Journal of Law Dynamics Review 3, no. 1 (May 2025): 20–29. https://doi.org/10.62039/ijldr.v3i1.80.

Sabina Tiffani and Faisal. “Analisis Hukum Terhadap Perlindungan Data Pribadi (Studi Kasus @farida.Nurhan Dan @codebluuuu).” Jurnal Ilmu Hukum, Humaniora Dan Politik 4, no. 3 (April 2024): 291–300. https://doi.org/10.38035/jihhp.v4i3.1915.

Sánchez Arjona, Mercedes Llorente. “Las Víctimas En El Espacio Judicial Europeo: Estudio de La Directiva 2012/29/UE, de 25 de Octubre de 2012.” Revista de Estudios de La Justicia, no. 22 (November 2015). https://doi.org/10.5354/0718-4735.2015.37589.

Sandika, Arabin, Cholidi Zainuddin, and Arief Wisnu Wardhana. “Legal Protection For Victims Of Misuse Of Personal Data When Making Online Loans.” Jurnal Ilmiah Advokasi 12, no. 2 (August 2024): 305–16. https://doi.org/10.36987/jiad.v12i2.5503.

Saunders, Jamie. “Tackling Cybercrime – the UK Response.” Journal of Cyber Policy 2, no. 1 (January 2017): 4–15. https://doi.org/10.1080/23738871.2017.1293117.

Shima, Arliana Agustin Faridhatul, and Lukman Santoso. “Right of Access to Legal Aid for the Poor: Study of Islamic Civil Cases in the PA Ponorogo Legal Area.” Istinbath: Jurnal Hukum 21, no. 01 (July 2024): 19–39. https://doi.org/10.32332/istinbath.v21i01.9654.

Situmeang, Ampuan, Jihyun Park, Lu Sudirman, Ninne Zahara Silviani, and Shenti Agustini. “Evaluating Data Breach Notification Protocols.” Lentera Hukum 12, no. 1 (April 2025): 42–61. https://doi.org/10.19184/ejlh.v12i1.47621.

Solove, Daniel J. “A Taxonomy of Privacy.” University of Pennsylvania Law Review 154, no. 3 (January 2006): 477. https://doi.org/10.2307/40041279.

Terwangne, Cécile de. “Privacy and Data Protection in Europe: Council of Europe's Convention 108 and the European Union's GDPR.” In Research Handbook on Privacy and Data Protection Law, 10–35. Edward Elgar Publishing, 2022. https://doi.org/10.4337/9781786438515.00007.

“The European Union’s Obligations to Safeguard the Fundamental Right to Data Protection Extraterritorially.” In Transatlantic Jurisdictional Conflicts in Data Protection Law, 33–56. Cambridge University Press, 2023. https://doi.org/10.1017/9781108784818.003.

Thoriquttyas, Titis, and Nita Rohmawati. “Maqasid Al-Sharia and the Digital Data Ownership: From al-Shatibi to Jasser Auda.” Journal of Islamic Law on Digital Economy and Business, February 27, 2026, 168–81. https://doi.org/10.20885/JILDEB.vol1.iss2.art5.

Triyanti, Ninuk, I. Gusti Ayu Ketut Rachmi Handayani, and Lego Karjoko. “Legal Gaps in Personal Data Protection: Reforming Indonesia’s Population Administration Law.” Hasanuddin Law Review 11, no. 1 (January 2025): 132. https://doi.org/10.20956/halrev.v11i1.6177.

Ujade, Shital Harishchandra. “Role of Social Work in Cybercrime Victim Support.” Gurukul International Multidisciplinary Research Journal, ahead of print, April 14, 2025. https://doi.org/10.69758/GIMRJ/2503I3IIVXIIIP0042.

Vardanyan, Lusine, Václav Stehlík, and Hovsep Kocharyan. “Digital Integrity: A Foundation for Digital Rights and the New Manifestation of Human Dignity.” TalTech Journal of European Studies 12, no. 1 (May 2022): 159–85. https://doi.org/10.2478/bjes-2022-0008.

verihubs. “Statistik Cybercrime Indonesia 2025-2026: Data Dan Tren Terbaru.” Accessed April 17, 2026. https://verihubs.com/blog/statistik-cybercrime-indonesia.

Wairimu, Samuel, and Lothar Fritsch. “Modeling Privacy Harms of Compromised Personal Medical Data - beyond Data Breach.” Proceedings of the 17th International Conference on Availability, Reliability and Security (New York, NY, USA), August 23, 2022, 1–9. https://doi.org/10.1145/3538969.3544462.

Waldman, Ari Ezra. “Privacy’s Rights Trap.” SSRN Electronic Journal, ahead of print, 2022. https://doi.org/10.2139/ssrn.4182858.

Yoo, Ju Seon. “Personal Information Protection Act Revised in 2023 and My Data Utilization Plan - Focusing on the Insurance Industry -.” Korea Financial Law Association 20, no. 2 (August 2023): 55–76. https://doi.org/10.15692/KJFL.20.2.2.

Zaprulkhan, Zaprulkhan. “Maqāṣid Al-Shariah in the Contemporary Islamic Legal Discourse: Perspective of Jasser Auda.” Walisongo: Jurnal Penelitian Sosial Keagamaan 26, no. 2 (December 2018): 445. https://doi.org/10.21580/ws.26.2.3231.