Cyberbullying represents a manifestation of digital violence that expands alongside the growing utilization of the internet and social media in society. This act does not merely encompass defamation or insults; rather, it has evolved into aggressive behavior perpetrated deliberately and repeatedly via electronic media to humiliate, intimidate, suppress, and degrade the psychological condition of the victim.11 In its evolution, cyberbullying manifests as harassment, denigration, impersonation, outing, cyberstalking, and gaslighting, which substantially violate an individual's mental integrity.12 In the Indonesian context, the legal regulation of cyberbullying does not exist as an independent, specific offense. Its mitigation remains scattered across several legal instruments, primarily Law Number 1 of 2024 concerning the Second Amendment to Law Number 11 of 2008 concerning Electronic Information and Transactions, Law Number 12 of 2022 concerning Sexual Violence Crimes, and Law Number 1 of 2023 concerning the Criminal Code.13

The Electronic Information and Transactions Law serves as the statutory baseline most frequently deployed to prosecute cyberbullying, particularly through Article 27A regarding attacks on honor or reputation, Article 27B concerning extortion and/or threats, and Article 29 regarding threats of violence or intimidation directed personally.14 However, the construction of these norms remains fundamentally tethered to the existence of visible digital content—such as text, images, videos, or electronic messages - rather than the cumulative patterns of repeated psychological attacks experienced by the victim. Consequently, positive law in Indonesia treats cyberbullying as a mere offshoot of electronic defamation or insult, rather than an autonomous form of digital psychological violence.15 Victim protection should not only encompass punitive actions against perpetrators but must structurally provide psychological rehabilitation and digital safety restorations. To delineate these structural differences clearly, the following open comparative table is presented:

Table 1. A Comparative Analysis of Law Enforcement and Victim Protection in Cyberbullying Crimes in Indonesia and Malaysia

This conceptual weakness becomes increasingly evident when cyberbullying is conducted through manipulative patterns that do not explicitly utilize coarse language or overt threats. In practice, behaviors such as gaslighting, social exclusion, and online grooming cause profound mental distress, yet they evade the literal phrasing of articles in the Electronic Information and Transactions Law because they do not satisfy the textual parameters of insult or threat.16 This demonstrates that the legal substance in Indonesia remains constrained by a content-oriented approach, focusing on the material substance of the message rather than the psychological injuries sustained by the victim.

In contrast, Malaysia demonstrates a more progressive paradigm. Through the Communications and Multimedia Act 1998 (CMA / Act 588), specifically Section 233, Malaysia long ago criminalized the use of network facilities to transmit communications that are offensive, menacing, harassing, or annoying to others.17 Furthermore, the legislative reform introduced via the Penal Code (Amendment) Act 2024 establishes specific protections against cyberbullying, particularly by codifying provisions regarding acts perpetrated repeatedly that induce psychological distress in the victim.18

The crucial distinction lies in how the two nations perceive the victim. Indonesia still tends to process cyberbullying from the perspective of public order infractions or honor violations, whereas Malaysia has shifted toward safeguarding the victim's mental integrity. Within the Malaysian framework, psychological suffering is no longer treated as a collateral effect but as a legally actionable injury.19 Thus, Malaysia aligns closely with the doctrine of psychiatric injury, acknowledging that psychological trauma constitutes a real, quantifiable legal injury.20

Applying Lawrence M Friedman's legal system theory, these disparities can be comprehensively unbundled.21 Regarding legal substance, Indonesia's provisions are fragmented and non-specific, whereas Malaysia has engineered explicit prohibitions against repeated behaviors and mental harm. Regarding legal structure, Indonesia faces inter-agency coordination gridlocks, prolonged content-takedown periods, and an absence of seamless integration between law enforcement agencies and victim support bodies.22 Conversely, Malaysia possesses robust institutional machinery in the Malaysian Communications and Multimedia Commission (MCMC), which is empowered to intercept digital threats and remove harmful content rapidly.23

In terms of legal culture, Indonesia struggles with low public awareness regarding the severity of cyberbullying and a pervasive culture of victim-blaming. Victims are frequently dismissed as oversensitive or held partially accountable for their digital victimization.24 Consequently, many suffer in silence due to fear of social stigma or institutional skepticism. Malaysia, while experiencing similar societal challenges, has initiated a more responsive digital protection culture backed by clear institutional pathways.25

Furthermore, victim protection in Indonesia remains suboptimal. Normatively, minor progress is visible through the recognition of mental suffering in Article 149 of the National KUHP, which defines a victim as a person enduring physical, mental, and/or economic harm resulting from a criminal act.26 Additionally, the Electronic Information and Transactions Law permits the deployment of psychological evidence and acknowledges psychological injury within electronic sexual violence.27 However, in practice, these advancements are not uniformly applied to general cyberbullying cases.

Protection in Indonesia is also fragmented. The Witness and Victim Protection Agency possesses the mandate to provide medical aid, psychological rehabilitation, and legal counsel.28 Nonetheless, access to these services is rarely swift or easily navigable for cyberbullying victims. Due to capacity boundaries, the lack of an integrated digital recovery architecture, and the absence of rapid content-removal protocols, the victim's trauma is often prolonged in cyberspace even after legal proceedings have commenced.29

Conversely, Malaysia presents a more unified protection template. The co-existence of the MCMC and public reporting mechanisms ensures that content monitoring, public complaints, and takedown interventions occur rapidly.30 Crucially, the Malaysian approach emphasizes neutralizing the harm directly within the digital sphere, rather than merely punishing the actor ex-post-facto. Consequently, there is a stronger structural orientation toward preventative protection and victim recovery.

Thus, the comparative analysis indicates that Indonesia adheres to a formal-positivistic paradigm focused on textual and material data validation, while Malaysia has transitioned toward a progressive model recognizing psychological suffering as a legal injury. This comparative baseline serves as the foundation for charting the course of Indonesian criminal law reform.

Reforming Indonesian criminal law against cyberbullying is imperative because the evolution of digital crimes vastly outpaces statutory updates. Current criminal codes fail to address the anonymous, pervasive, cumulative, and deeply traumatic character of cyberbullying.31 Therefore, reform must transcend merely escalating punitive sentences; it must deliver an adaptive, victim-oriented model grounded in the operational realities of cyberspace.

The first model of reform requires the formulation of cyberbullying as an independent, specific offense within Indonesian criminal legislation. The statutory definition must encapsulate its distinct constituent elements: behavior executed via electronic media, perpetrated intentionally, characterized by repeated acts, aimed at attacking, humiliating, or intimidating the target, and culminating in verified psychological or social suffering.32 The element of repeated acts is vital because cyberbullying rarely materializes in a solitary text; its danger lies in the accumulation of digital actions that systematically erode the victim's mental health.33

The second model demands the explicit recognition of mental harm as a distinct legal injury. Historically, the Indonesian criminal justice system has favored physical and material damages over psychological trauma. Yet, in cyberbullying, the primary injury consists of clinical depression, anxiety, loss of security, and social ostracization.34 Criminal law reform must elevate psychological suffering to an independent legal injury, rather than a mere secondary consequence. This fits the trajectory of the National Criminal Code and Sexual Violence Law, but requires broad application to cyberbullying generally.35 The third model mandates strengthening evidentiary systems based on psychological impact. In cyberbullying prosecutions, evidence must not be limited to digital screenshots or textual insults. The evidentiary framework must afford substantial weight to expert psychological testimonies, clinical assessments, medical histories, and other evidence that verify the presence of psychiatric distress.36 Enforcement must move beyond proving the existence of content to proving the actual harm inflicted on the human subject.

The fourth model necessitates the structural integration of criminal law instruments with digital protection mechanisms. Punishing the offender is insufficient if the defamatory or harmful content remains accessible online. The state must build an infrastructure capable of executing immediate content takedowns, erasing digital footprints, protecting victim identities, supplying psychological aid, and enabling social rehabilitation.37 Replicating the efficacy of the MCMC in Malaysia, Indonesia must expand the operational powers of Komdigi, streamline its coordination with the National Police and Witness and Victim Protection Agency, and introduce a single, rapid digital reporting portal.38

The fifth model requires the harmonization of fragmented regulations. Currently, conflicts and overlaps persist between the Electronic Information and Transactions Law, Sexual Violence Law, National Criminal Code, and child protection statutes. Reform must synchronize these laws to eliminate jurisdictional conflicts and ambiguities, ensuring law enforcement operates with clarity and victims receive consistent protection.39 The sixth model dictates the institutionalization of a victim-centered criminal policy. Criminal law must shed its exclusive fixation on the perpetrator and place the victim at the center of the judicial process, satisfying modern victimological requirements by prioritizing restoration alongside deterrence.40

The seventh model involves reshaping the digital legal culture of the public. Statutes are ineffective without a corresponding shift in social consciousness. Hence, criminal law reform must be paired with massive digital literacy campaigns, anti-cyberbullying education in schools, parental supervision networks, and nationwide psychological health initiatives to stop the normalization of digital violence as "free speech."41

In conclusion, drawing from the Malaysian experience, the ideal reform model for Indonesia must balance three core pillars: normative orientation (specific codification, mental harm as legal injury, and statutory synchronization), structural orientation (institutional empowerment, rapid content takedowns, and unified protective portals), and cultural orientation (building public digital ethics). Through this triad, Indonesian criminal law can shift from a system that merely punishes to one that truly restores.