The development of digital technology has facilitated communication access but
also given rise to new forms of crime, such as online prostitution involving the
misuse of children's personal identities. Children's identities—such as names,
photos, and personal information—are often exploited by perpetrators for sexual
exploitation without the victims’ knowledge. These acts clearly violate children's
rights and have serious psychological, social, and long-term impacts. The state has
an obligation to provide strong legal protection for children, especially as a
vulnerable group in the digital age. This study aims to analyze the form of legal
protection for child victims whose personal identities are misused in online
prostitution, based on the Child Protection Act, and to examine the application of
the law to the perpetrators. This research uses a normative juridical method with a
qualitative approach. Data were obtained through literature studies (secondary data)
and documentation such as court decisions and relevant legislation (primary data).
The data were analyzed descriptively and analytically to provide a comprehensive
understanding of the legal issues under study. The results show that Law Number
35 of 2014 provides a solid legal basis for protecting children through both
preventive and repressive measures. The theory of legal protection by Philipus M.
Hadjon strengthens the argument that the state must guarantee children’s rights and
ensure comprehensive recovery for victims. Perpetrators of identity misuse may be
subject to sanctions under the Personal Data Protection Law and the Indonesian
Penal Code, although implementation in practice still faces several challenges.