Strengthening Personal Data Protection Law to Address Artificial Intelligence and Cybersecurity Challenges

Sutikno Sutikno; Bernadetta Tjandra Wulandari; Lisnasari Ika Wardhani; Indarto Kusnohadi; Irman Syahriar

doi:10.55927/eajmr.v5i10.1

Authors

Sutikno Sutikno Universitas Kristen Indonesia
Bernadetta Tjandra Wulandari Universitas Katolik Indonesia Atma Jaya
Lisnasari Ika Wardhani IBLAM Law Scholl
Indarto Kusnohadi Politeknik Angkatan Darat
Irman Syahriar Univesitas 17 Agustus 1945, Samarinda

DOI:

https://doi.org/10.55927/eajmr.v5i10.1

Keywords:

Personal Data Protection, Artificial Intelligence, Cybersecurity, Legal Reform, Algorithmic Transparency

Abstract

The rapid advancement of Artificial Intelligence (AI) and the increasing sophistication of cybersecurity threats present unprecedented challenges to individual privacy rights and personal data sovereignty. Employing a qualitative legal research design grounded in a doctrinal approach and library research. The specific findings reveal four critical vulnerabilities: (1) structural incompatibility between core privacy principles (consent, purpose specification, data erasure) and deep learning re-training models; (2) AI-specific attack vectors like prompt injection and model inversion that exfiltrate raw personal data directly from parameter weights without triggering traditional perimeter security breach alerts; (3) operational deficits in static Data Protection Impact Assessments (DPIAs) that fail to monitor post-deployment algorithmic drift; and (4) acute forensic auditing capacity deficits among regulatory authorities alongside the breakdown of cross-border data transfer tools in cloud-hosted AI environments.

References

Adnin, N., Ridhwan, M., & Farida, A. (2024). A literature review on regulatory, ethical and data protection challenges in artificial intelligence deployment. International Journal of Social and Educational Research, 6(2), 112–128.

DPO Consulting. (2026). GDPR and AI Compliance: What Organisations Need to Know in 2026. Global Data Protection & Regulatory Insights.

European Union. (2024). Regulation (EU) 2024/1689 of the European Parliament and of the Council laying down harmonised rules on artificial intelligence (Artificial Intelligence Act). Official Journal of the European Union.

Farida, A. (2026). The Role of Artificial Intelligence in Shaping Privacy Laws: A Comparative Analysis of Global Regulatory Frameworks. INFLUENCE: International Journal of Science Review, 8(3), 70–88.

Injurity Journal. (2025). The Role of Artificial Intelligence in the Implementation of Personal Data Protection Law: Legal Accountability and Human Rights. Journal of Legal and Regulatory Studies, 3(1), 45–59.

Qureshi, R., & Koo, I. (2026). A comprehensive survey of cybersecurity threats and data privacy issues in complex automated networks. Applied Sciences, 16(3), 1511–1530.

ResearchGate Cyber Law Review. (2026). Artificial Intelligence, Cyber Law, and Data Protection: Legal Challenges and Regulatory Responses in the Digital Age. International Cyber Law & Algorithmic Governance Papers

Bourtoule, L., Chandrasekaran, V., Choquette-Choo, C. A., Jia, H., Travers, A., Zhang, B., Lie, D., & Papernot, N. (2021). Machine unlearning. Proceedings of the 2021 IEEE Symposium on Security and Privacy (SP), 141–159.

Carlini, N., Tramer, F., Wallace, E., Jagielski, M., Herbert-Voss, A., Lee, K., Roberts, A., Brown, T., Song, D., Erlingsson, U., Oprea, A., & Raffel, C. (2021). Extracting training data from large language models. USENIX Security Symposium, 2633–2650.

Floridi, L., Cowls, J., Beltrametti, M., Chatila, R., Chazerand, P., Dignum, V., Luetge, C., Madelin, R., Pagallo, U., Rossi, F., Schafer, B., Valcke, P., & Vayena, E. (2022). An ethical framework for a good AI society: Opportunities, risks, principles, and recommendations. In Ethics, Governance, and Policies in Artificial Intelligence, Springer, 19–39.

Hacker, P. (2023). Sustainable AI regulation: Just, green, and competitive artificial intelligence for the EU. European Journal of Risk Regulation, 14(1), 114–136.

Kuner, C. (2021). Dynamic data protection law and international data transfers. International Data Privacy Law, 11(1), 1–3.

Madiega, T. (2022). Regulatory sandboxes for artificial intelligence. European Parliamentary Research Service (EPRS) Briefing, European Parliament.

Mittelstadt, B., Russell, C., & Wachter, S. (2023). Explaining explanations in AI: Moving from technical transparency to actionable legal explanations. Oxford University Legal Research Paper Series, No. 12/2023.

Sartor, G., & Lagioia, F. (2022). The impact of the General Data Protection Regulation (GDPR) on artificial intelligence. European Parliamentary Research Service (EPRS) Study, European Parliament.

Selbst, A. D., & Barocas, S. (2023). The intuitive appeal of explainable AI and its legal pitfalls. Berkeley Technology Law Journal, 38(1), 125–188.

Shokri, R., & Shmatikov, V. (2022). Privacy-preserving deep learning and the law: Legal standards for federated learning and differential privacy. Journal of Cybersecurity and Law, 8(2), 89–114.

Smuha, N. A. (2021). From a 'human-centric' to a 'human-rights-based' approach to AI: A European perspective. Journal of AI and Law, 29(4), 481–501.

Veale, M., & Zuiderveen Borgesius, F. (2021). Demystifying the EU's Artificial Intelligence Act: Analyzing the statutory design and enforcement mechanisms. Computer Law & Security Review, 41, 105582.

Wachter, S., Mittelstadt, B., & Russell, C. (2021). Why fairness cannot be automated: Bridging the gap between EU non-discrimination law and machine learning. Harvard Journal of Law & Technology, 34(2), 611–688.