AI Regulations and Policies for Data Privacy Protection in Indonesia

This study examines the relationship between AI policy and data privacy in Indonesia, focusing on social media, public services, and electronic government systems. Using a Regulatory Impact Assessment (RIA) approach with normative legal and public policy analysis, the study draws on national surveys, policy documents, and academic literature. Privacy Calculus Theory and Social Exchange Theory are applied to explain personal data sharing behavior in digital environments. The findings indicate that high internet and social media use, particularly among individuals aged 15–34, is not supported by adequate digital security literacy, encouraging oversharing and increasing risks of online fraud, identity theft, and account hacking. Furthermore, the implementation of the Personal Data Protection Law remains limited in regulating AI-based data processing, especially regarding algorithm transparency, accountability of automated decision-making, and oversight mechanisms.