Legal Challenges of Coretax System Implementation: Harmonization of Personal Data Protection and Electronic Information Security

Authors

  • Agus Riartono
  • Wahid Suharto
  • Arlia Nugrahawulan
  • Anugraheni Kus Kelanawati
  • M. Shidqon Prabowo

DOI:

https://doi.org/10.30659/ldj.8.2.1090-1107

Keywords:

Coretax, Directorate General of Taxes, Electronic Information and Transactions Law, Legal Harmonization, Personal Data Protection

Abstract

The implementation of the Coretax System represents a major step in the digital transformation of Indonesia’s tax administration by integrating taxpayer data into a centralized electronic system. However, this modernization raises legal issues concerning personal data protection, electronic information security, and the harmonization of tax and digital governance regulations. This study aims to analyze the legal status of the Directorate General of Taxes (DGT) as a personal data controller and electronic system operator, evaluate its legal responsibility in cases of system failure or data breaches, and examine the harmonization between the General Provisions and Tax Procedures Law (KUP Law), the Personal Data Protection Law (PDP Law), and the Electronic Information and Transactions Law (ITE Law). This research employs a normative juridical method using statutory and conceptual approaches with qualitative legal analysis. The findings reveal that the DGT’s dual legal position creates overlapping obligations and legal uncertainty due to the absence of clear technical regulations on data protection, electronic system security, and inter-agency accountability. This study concludes that harmonized regulations and comprehensive technical standards are essential to ensure legal certainty, strengthen personal data protection, and support accountable digital tax administration in Indonesia.

Downloads

Download data is not yet available.

References

Adistiya, K. N., & Kusuma, P. R. A. (2024). Perlindungan Hukum Bagi Konsumen Terhadap Kebocoran Data Pribadi Berdasarkan Pasal 16 Ayat 2 Huruf E Undang-Undang Nomor 27 Tahun 2022 Tentang Perlindungan Data Pribadi. Jurnal Ilmu Hukum Sui Generis, 4(3). https://doi.org/10.23887/jih.v4i3.5034

‘Aisy, F. R., Maskur, M. A., & Adzkiya’Amiruddin, A. M. (2025). Establishing Indonesia’s Personal Data Protection Agency: Comparative Administration Sanctions Enforcement from Ireland, Australia, and Singapore. Journal of Indonesian Legal Studies, 10(1), 431-482. https://doi.org/10.15294/jils.v10i1.13755

Akhmad, W. F., Oktaria, D., & Prabowo, S. (2025). Designing a Compliance Evaluation Model for Data Privacy Management System: Integrating ISO 27701 and Indonesia’s Data Protection law into an Assessment Tool. In 2025 3rd International Conference on Software Engineering and Information Technology (ICoSEIT) (pp. 1-6). IEEE. https://doi.org/10.1109/ICoSEIT67010.2025.11290907

Algamar, M. D., & Ismail, N. (2023). Data subject access request: what Indonesia can learn and operationalise in 2024?. Journal of Central Banking Law and Institutions, 2(3), 481-512. https://doi.org/10.21098/jcli.v2i3.171

Annan, A. (2024). Tinjauan Yuridis Perlindungan Data Pribadi Pada Sektor Kesehatan Berdasarkan Undang-Undang No. 27 Tahun 2022. Synergy: Jurnal Ilmiah Multidisiplin, 1(04), 247-254.

Astuti, E. F., Hidayanto, A. N., Nurwardani, S., & Salsabila, A. Z. (2024). Assessing Indonesian MSMEs’ Awareness of Personal Data Protection by PDP Law and ISO/IEC 27001: 2013. International Journal of Safety & Security Engineering, 14(5). https://doi.org/10.18280/ijsse.140523

Butarbutar, R. (2020). Personal data protection in P2P lending: What Indonesia should learn from Malaysia?. Pertanika Journal of Social Sciences & Humanities, 28(3).

Fransisca, I., Budianto, A. S., Widjiastuti, A., & Tedjokusumo, D. D. (2025). Abuse of Authority by the Directorate General of Taxes: State Administrative Law Perspective. Jurnal Hukum De’rechtsstaat, 11(1), 19-35. https://doi.org/10.30997/jhd.v11i1.15497

Gumilar, G., Budiarto, E., Galinium, M., & Lim, C. (2023, November). Personal data protection framework for web developers and API providers under UU PDP. In 2023 International Conference on Informatics, Multimedia, Cyber and Informations System (ICIMCIS) (pp. 189-194). IEEE. https://doi.org/10.1109/ICIMCIS60089.2023.10349040

Gustryan, M., & Hoesein, Z. A. (2025). Peran Undang-Undang ITE dan Undang-Undang Perlindungan Data Pribadi dalam Perlindungan Data dan Privasi di Era Ekonomi Digital. Jurnal Minfo Polgan, 14(2), 3333-3343. https://doi.org/10.33395/jmp.v14i2.15746

Hetharie, Y., Ikhwansyah, I., Rahmawati, E., & Soplantila, V. D. (2025). Hybrid Model of Personal Data Protection for Consumers in Digital MSMEs: A Comparative Study of Indonesian and China Regulations. Journal of Law and Legal Reform, 6(4), 2015-2058.

Hidayat, A. K. W., & Inayati, I. (2025). Implementation of the Core Tax System: Impacts and Challenges on Tax Revenue in Indonesia. Journal Transnational Universal Studies, 3(6), 1-8. https://doi.org/10.58631/jtus.v3i6.168

Hutabarat, E., Situmeang, A., & Girsang, J. (2023). Tinjauan yuridis Pasal 15 Undang-Undang Pers terhadap fungsi dan kewenangan Dewan Pers dalam mencegah berita bohong. Al-Qanun: Jurnal Pemikiran dan Pembaharuan Hukum Islam, 26(1), 57-70. https://doi.org/10.15642/alqanun.2023.26.1.57-70

Irawan, A., & Wahyuni, F. (2025). Transformasi Regulasi Dan Kebijakan Hukum Pidana Dalam Ekosistem Bisnis Digital Di Indonesia. Indragiri Law Review, 3(2), 19-28. https://doi.org/10.32520/ilr.v3i2.157

Januarita, R., Alamsyah, I. F., & Perdana, A. (2025). Guardians of data: TruMe Life’s continuous quest for data protection. Journal of Information Technology Teaching Cases, 15(2), 254-264. https://doi.org/10.1177/20438869241242141

Maharani, D. P., Kusumadara, A., Widhiyanti, H. N., & Dewantara, R. (2025). Administrative legal liability for data breaches: Securing the right to compensation in Indonesia and the EU. Law. Human. Environment, 3(16), 173-190. https://doi.org/10.31548/law/3.2025.173

Nurzihad, M. I., Ichsan, M., & Fitriyanti, F. (2023, February). Personal Data Protection in Indonesian E-commerce Platforms: The Maqasid Sharia Perspective. In International Congress on Information and Communication Technology (pp. 1077-1086). Singapore: Springer Nature Singapore. https://doi.org/10.1007/978-981-99-3243-6_88

Oktafiandi, H., Panjaitan, F., & Ramadhan, M. F. (2025, December). Comparative Analysis of Resampling Techniques to Improve SVM and Random Forest Performance in Coretax Sentiment Analysis. In 2025 International Conference on Informatics, Multimedia, Cyber and Information System (ICIMCIS) (pp. 1073-1078). IEEE. https://doi.org/10.1109/ICIMCIS68501.2025.11326920

Prabowo, S., Abdurohman, M., Nuha, H. H., & Sutikno, S. (2025). Identifying and Validating Critical Factors in Designing a Comprehensive Data Protection Impact Assessment (DPIA) Framework for Indonesia. International Journal of Safety & Security Engineering, 15(1). https://doi.org/10.18280/ijsse.150113

Pracasya, D. P. (2021). Penerapan Peraturan Perundang-Undangan Pajak Daerah Atas Perubahan Pasal Mengenai Perpajakan Dalam Undang-Undang Dasar Republik Indonesia Tahun 1945. " Dharmasisya” Jurnal Program Magister Hukum FHUI, 1(2), 13.

Prasetyoningsih, N., Ismail Nawang, N., Putri, W. V., & Amirullah, M. N. R. (2024, June). Legal Protection for the Personal Data in Indonesia and Malaysia. In International Conference on Human-Computer Interaction (pp. 161-169). Cham: Springer Nature Switzerland. https://doi.org/10.1007/978-3-031-61379-1_11

Putra, T. I., Islam, A. J., & Rahman, A. M. A. (2024). Integrating Islamic laws into Indonesian data protection laws: An analysis of regulatory landscape and ethical considerations. Contemporary Issues on Interfaith Law and Society, 3(1), 85-118. https://doi.org/10.15294/ciils.v3i1.31392

Reksoprodjo, A. A., Dachyar, M., & Pratama, N. R. (2024). A Decision-Making Model for Selecting Personal Data Protection Frameworks for Companies in Indonesia. Journal of System and Management Sciences, 14(2), 156-171. https://doi.org/10.33168/JSMS.2024.0210

Rosadi, S. D., Noviandika, A., Walters, R., & Aisy, F. R. (2023). Indonesia’s personal data protection bill, 2020: does it meet the needs of the new digital economy?. International Review of Law, Computers & Technology, 37(1), 78-90. https://doi.org/10.1080/13600869.2022.2114660

Rulandari, N., Natision, A., Van Kommer, V., Kesmawan, A. P., & Suryanih, S. (2022). Analysis of the effectiveness of taxpayer data security in implementing tax obligations at the directorate general of taxes. Journal of Governance and Public Policy, 9(3), 241-254. https://doi.org/10.18196/jgpp.v9i3.15976

Saputra, Y., Putri, N. I., Nurfadillah, T., Haryani, H., Suryana, N., & Dauni, P. (2025). Public Perception of the Coretax System on Social Media: A Sentiment Analysis Approach Using Hybrid Method. In 2025 Tenth International Conference on Informatics and Computing (ICIC) (pp. 1-6). IEEE. https://doi.org/10.1109/ICIC68054.2025.11309489

Sariwating, J. R. D. (2025). The Use of Tokenization, Encryption, and Masking in Database Systems for Data Security. In 2025 13th International Conference on Cyber and IT Service Management (CITSM) (pp. 1-6). IEEE. https://doi.org/10.1109/CITSM67730.2025.11291375

Situmeang, A., Park, J., Sudirman, L., Silviani, N. Z., & Agustini, S. (2025). Evaluating Data Breach Notification Protocols: Comparative Analysis of Indonesia and South Korea. Lentera Hukum, 12(1), 42-61. https://doi.org/10.19184/ejlh.v12i1.47621

Sulistianingsih, D., Ihwan, M., Setiawan, A., & Prabowo, M. S. (2023). Tata kelola perlindungan data pribadi di era metaverse (telaah yuridis undang-undang perlindungan data pribadi). Masalah-Masalah Hukum, 52(1), 97-106. https://doi.org/10.14710/mmh.52.1.2023.97-106

Tiara, K. A., Rafi’Ar-Robbani, M., Kurnianingrum, D., Rais, F., & Agung, R. H. P. A. (2025). Mining Public Sentiment on Digital Tax System: A Twitter-Based Case Study of Coretax DJP. In 2025 International Conference on Data Science and Its Applications (ICoDSA) (pp. 914-919). IEEE. https://doi.org/10.1109/ICoDSA67155.2025.11157264

Triyanti, N., Handayani, I. G. A. K. R., & Karjoko, L. (2025). Legal Gaps in Personal Data Protection: Reforming Indonesia’s Population Administration Law. Hasanuddin Law Review, 11(1), 132-147. https://doi.org/10.20956/halrev.v11i1.6177

Utama, K. C., & Yuliana, L. (2025). Implementasi pembaruan sistem inti administrasi perpajakan (Coretax) terhadap efisiensi kinerja pegawai di Direktorat Jenderal Pajak. Master Manajemen, 3(2), 43-56. https://doi.org/10.59603/masman.v3i2.813

Vic, B. J. (2025). Effectiveness of Fiscal Criminal Law Enforcement in Handling Criminal Acts in the Taxation and Customs Sector. Devotion: Journal of Research and Community Service, 6(7), 666-674. https://doi.org/10.59188/devotion.v6i7.25477

Widiatedja, I. G. N. P., & Mishra, N. (2023). Establishing an independent data protection authority in Indonesia: a future–forward perspective. International Review of Law, Computers & Technology, 37(3), 252-273. https://doi.org/10.1080/13600869.2022.2155793

Wildan, A., & Arifin, S. (2025). Analisis dan Evaluasi Peraturan Pemerintah No. 71 Tahun 2019 tentang Penyelenggaraan Sistem dan Transaksi Elektronik (PSTE) dalam Menanggulangi Kejahatan Ransomware di Indonesia. ACADEMOS Jurnal Hukum dan Tatanan Sosial, 4(1). https://doi.org/10.30651/aca.v4i1.26617

Wiryawan, D., Aqila, K. S., Sianipar, N. F., Suhartono, J., & Karmawan, I. G. M. (2024). Personal Data Protection Factors on the Strengthening of IT Governance Framework Implementation. In 2024 International Conference on Electrical, Computer and Energy Technologies (ICECET (pp. 1-6). IEEE. https://doi.org/10.1109/ICECET61485.2024.10698151

Wiwoho, J., Pati, U. K., & Pratama, A. M. (2024). Enabling Data Portability And Interoperability Under Indonesia’s Data Protection Law. Masalah-Masalah Hukum, 53(3), 271-282. https://doi.org/10.14710/mmh.53.3.2024.271-282

Prayoga, P. E. (2025). Pelindungan Data Pribadi Dalam Open Application Programming Interface (OPEN API) Payment: Studi Komparatif Inggris dan Indonesia (Doctoral dissertation, Universitas Gadjah Mada).

Downloads

Published

2026-06-04

Issue

Vol. 8 No. 2 (2026): June 2026

Section

Articles

License

Authors who publish with this journal agree to the following terms:

  1. The journal holds the copyright for each article published with work licensed simultaneously under Creative Commons Attribution 4.0 International License, which allows others to share the work with an acknowledgment of the authorship and early publication of the work in this journal.
  2. Authors must agree to the copyright transfer agreement by checking the Copyright Notice column at the initial stage when submitting the article.
  3. The copyright of this document is owned by Journal Master of Law UNISSULA and is protected by law

How to Cite

Legal Challenges of Coretax System Implementation: Harmonization of Personal Data Protection and Electronic Information Security. (2026). Law Development Journal, 8(2), 1090-1107. https://doi.org/10.30659/ldj.8.2.1090-1107