Case 1 – Deepfake and AI Ethics
In August 2025, TikTok users were shocked by a viral video that showed a famous Indonesian public figure making a controversial political statement. Later, fact-checkers revealed that the clip was not real-it was a deepfake created using artificial intelligence.
This case highlights serious ethical and digital risks. Ethically, deepfakes blur the line between truth and fiction. They can ruin reputations, spread misinformation, and damage public trust. From a digital literacy perspective, it also shows how easy it is for people to share unverified content, especially when social media algorithms reward engagement rather than accuracy.
From the AI ethics viewpoint, this issue goes against UNESCO’s principle of human-centered AI, which emphasizes fairness, accountability, and transparency. Deepfakes use human likenesses without consent, which means they ignore the basic principle of respect for human dignity.
Several Indonesian laws are relevant here.
- ITE Law (Law No. 1 of 2024, Articles 27A-27B) clearly prohibits sharing false or harmful electronic information, including content that can damage someone’s reputation.
- Personal Data Protection (PDP) Law No. 27 of 2022 protects biometric data such as someone’s face or voice. Using that data without permission, even for AI-generated media, is a form of privacy violation.
- Copyright Law No. 28 of 2014 also applies if the deepfake reuses video materials or recordings without the creator’s consent.
To prevent similar problems, universities could create a Campus AI Code of Ethics.
It should include:
- Transparency: Every AI-generated content must include a clear note or disclaimer.
- Accountability: Students and staff are fully responsible for anything they publish online.
- Consent: Never use someone’s likeness, photo, or voice without permission.
- Traceability: Mention what AI tools were used, when, and for what purpose.
- Education: Provide digital literacy workshops to teach students how to detect deepfakes.
In short, the deepfake case teaches us that technology can be powerful, but also dangerous when ethics are ignored. Digital literacy must include the ability to question, verify, and act responsibly online.
Case 2 – Ethics of AI Use in Academia
A student who secretly used ChatGPT and MidJourney to complete their thesis without any disclosure raises an important question about academic integrity in the AI era. The main ethical issue here is not the use of AI itself, but the lack of transparency and honesty.
From an academic ethics perspective, passing off AI-generated text or images as one’s own work is still plagiarism. It violates the principle of intellectual honesty, which is fundamental in education. According to UNESCO’s AI Ethics Principles (2021), ethical AI use must follow two core values — transparency and accountability. That means users must openly declare when AI tools are used and remain responsible for checking the accuracy and originality of their outputs.
Legally, Copyright Law No. 28 of 2014 (Article 40) says that authorship is tied to creative input. If AI produces content automatically, then there’s no clear human creator. Submitting AI-generated work under a student’s name misrepresents authorship and could be seen as academic fraud. The ITE Law (2024) also prohibits manipulating electronic data in a way that misleads others.
To address this issue, universities should adopt clear guidelines on ethical AI use in academic settings. For example:
- Disclosure Requirement: Students must mention if and how they used AI tools.
- Verification Responsibility: Even when AI is used, students remain responsible for the accuracy and originality of their work.
- No Blind Copying: Directly copying AI output without review or revision is prohibited.
- Faculty Oversight: Lecturers can use AI-detection tools, but focus on education rather than punishment.
- AI Literacy Training: Students should learn how to work with AI ethically, not depend entirely on it.
Ultimately, AI should be a co-pilot, not a ghostwriter. It can help with ideas, structure, and design, but human creativity and critical thinking must remain at the center of academic work.
Case 3 – Data Privacy and Cloud Breach
In May 2025, a massive data breach hit a university in Indonesia. Thousands of students had their personal information—such as ID numbers, transcripts, and photos—leaked online. This case demonstrates how crucial digital safety and data ethics are for educational institutions.
The breach might have occurred due to phishing emails, weak passwords, or poorly configured cloud storage. These are common vulnerabilities when data systems are not secured using encryption or multi-factor authentication. Beyond technical mistakes, this also reflects a lack of digital awareness among staff and students.
Under Personal Data Protection (PDP) Law No. 27 of 2022, universities are considered data controllers responsible for protecting all personal data they collect.
- Articles 35–39 require organizations to apply strict security standards and limit data access only for legitimate purposes.
- Article 46 says institutions must inform affected individuals immediately after a data breach.
Failure to do so can result in legal penalties (Articles 57–58).
The ITE Law (2024) also bans unauthorized access to electronic systems, while Kominfo Regulation No. 20/2016 requires strong encryption for sensitive information.
To improve digital safety, universities should adopt a comprehensive data protection policy, which includes:
- Two-Factor Authentication for all campus systems.
- Data Encryption both during storage and transmission.
- Regular Security Audits and ethical hacking simulations.
- Incident Response Plan with mandatory 72-hour notification to users and authorities.
- Digital Literacy Training for staff and students on safe online behavior.
This case reminds us that cybersecurity is not only a technical issue—it’s also an ethical responsibility. Protecting personal data means protecting trust. In a digital society, privacy is part of human dignity, and every institution must treat it as such.
