Digital Crime & Cyber Law

The digital domain has become a primary theatre of both commerce and dispute, and Indonesian law — principally the Electronic Information and Transactions Law (UU ITE) and its subsequent amendments — has developed accordingly, though not always with the clarity practitioners would prefer. We advise on and litigate matters involving online defamation and the distribution of content alleged to violate decency or public order provisions, data breaches and the unauthorised disclosure of personal information under the Personal Data Protection Law (UU PDP), electronic fraud, unauthorised access to electronic systems, and the distinctive evidentiary questions that digital matters raise — chiefly, how electronic records are authenticated, preserved, and admitted as evidence under both the Criminal Procedure Code and the ITE Law's own evidentiary provisions.

We advise platforms, businesses, and individuals on both sides of this practice: as complainants seeking to establish and prove a digital offence against them, and as respondents defending against allegations that frequently turn as much on technical fact as on legal characterisation. A screenshot is not, by itself, proof of authorship; a server log is not, by itself, proof of intent; and a prosecution or civil claim built on an incomplete technical record is vulnerable in ways that counsel unfamiliar with the underlying technology will miss. We work closely with digital forensic specialists where the matter requires it, and we argue the technical and legal dimensions of a case together, because in this domain the two cannot be separated without weakening both.

Our cyber law practice also advises businesses on compliance obligations that did not exist a decade ago and are still maturing in their enforcement — data protection governance, breach notification obligations, electronic contract validity, and the liability exposure that attaches to platforms hosting user-generated content. For clients operating digitally, which today describes nearly every client regardless of sector, we treat cyber law not as a specialist curiosity but as a standing compliance obligation, and we advise accordingly, before a breach or a dispute makes the advice urgent rather than merely prudent.