Legal Protection of Consumers' Personal Data in E-Commerce Transactions: A Normative Analysis of Indonesian Regulation and the Liability of E-Commerce Providers
Keywords:
personal data protection; consumer protection; e-commerce; legal liability; data breach;IndonesiaAbstract
The rapid growth of electronic commerce (e-commerce) in Indonesia has made consumers' personal data a valuable asset that is routinely collected, stored, and transferred by business actors, and has also exposed it to leakage, hacking, and misuse. This article examines (1) the legal protection of consumers' personal data in e-commerce transactions and (2) the liability of e-commerce providers when such data are leaked. Using a normative legal research method with a statute approach and a policy-oriented approach, the study analyses primary legal materials, namely Law No. 8 of 1999 on Consumer Protection and Law No. 27 of 2022 on Personal Data Protection, together with the Electronic Information and Transactions Law, Government Regulation No. 80 of 2019, and secondary legal materials. The analysis is descriptive, interpretative, evaluative, and argumentative. The findings show that protection is layered, combining general consumer law, electronic transaction law, and the Personal Data Protection Law, with both preventive and repressive characteristics. Before Law No. 27 of 2022, sectoral rules were fragmented and lacked clear sanctions. Liability of providers can be constructed through default, unlawful acts under Article 1365 of the Civil Code, the compensation mechanism in Article 19 of the Consumer Protection Law, and the accountability duties of electronic system operators. The study concludes that the Personal Data Protection Law strengthens legal certainty, but effective protection depends on consistent enforcement, robust internal data governance by providers, and greater consumer awareness.
References
Amiruddin, & Asikin, Z. (2004). Pengantar metode penelitian hukum [Introduction to legal research methods]. PT Raja Grafindo Persada.
Arief, D. M., & Gultom, E. (2005). Cyber law: Aspek hukum teknologi informasi [Cyber law: Legal aspects of information technology]. Refika Aditama.
Aryani, A. P., & Susanti, L. E. (2022). Pentingnya perlindungan data pribadi konsumen dalam transaksi online pada marketplace terhadap kepuasan konsumen [The importance of protecting consumers' personal data in online marketplace transactions for consumer satisfaction]. Jurnal Ahmad Dahlan Legal Perspective, 2(1).
Asshiddiqie, J. (2008). Pokok-pokok hukum tata negara Indonesia pasca reformasi [Principles of Indonesian constitutional law after the reform]. Bhuana Ilmu Populer.
Indrati S., M. F. (2002). Ilmu perundang-undangan: Jenis, fungsi, dan materi muatan [The science of legislation: Types, functions, and content]. Kanisius.
Kelsen, H. (2006). Teori hukum murni [Pure theory of law] (R. Mutaqien, Trans.). Nuansa & Nusa Media.
Kusnadi, S. A. (2021). Perlindungan hukum data pribadi sebagai hak privasi [Legal protection of personal data as a privacy right]. Al Wasath: Jurnal Ilmu Hukum.
Marzuki, P. M. (2006). Penelitian hukum [Legal research]. Kencana.
Matsuura, J. H. (2002). Security, rights, and liabilities in e-commerce. Artech House.
Nasution, A. Z. (2001). Perlindungan hukum konsumen [Legal protection of consumers]. Grasindo.
Novita, Y. D., & Santoso, B. (2021). Urgensi pembaharuan regulasi perlindungan konsumen di era bisnis digital [The urgency of renewing consumer protection regulation in the digital business era]. Jurnal Pembangunan Hukum Indonesia, 3(1).
Perdana, A., et al. (2014). Penyelesaian wanprestasi dalam perjanjian jual beli melalui media elektronik [Settlement of default in sale and purchase agreements through electronic media]. Jurnal Ilmu Hukum, 2.
Rahardjo, S. (2002). Sosiologi hukum: Perkembangan, metode, dan pilihan masalah [Sociology of law: Development, methods, and choice of problems]. Muhammadiyah University Press.
Ridwan HR. (2016). Hukum administrasi negara [State administrative law]. Rajawali Pers.
Setiawan, R. (2008). Pokok-pokok hukum perikatan [Principles of the law of obligations]. Bina Cipta.
Sibuea, H. P. (2010). Asas negara hukum, peraturan kebijakan & asas-asas umum pemerintahan yang baik [Principles of the rule of law, policy regulations, and general principles of good governance]. Erlangga.
Sinaga, E. M. C. (2020). Formulasi legislasi perlindungan data pribadi [Legislative formulation of personal data protection]. Jurnal RechtsVinding, 9(2).
Sjahdeini, S. R. (2001). Hukum cyber: Sistem pengamanan e-commerce [Cyber law: E-commerce security systems].
Soekanto, S., & Mamudji, S. (2012). Penelitian hukum normatif: Suatu tinjauan singkat [Normative legal research: A brief review] (14th ed.). PT Raja Grafindo Persada.
Sofian, A. (2021). Hukum perlindungan konsumen di Indonesia [Consumer protection law in Indonesia]. Sinar Grafika.
Subekti. (2003). Hukum perjanjian dan penerapannya [Contract law and its application]. PT Raja Grafindo Persada.
Thohari, A. (2016). Hak konstitusional dalam hukum tata negara Indonesia [Constitutional rights in Indonesian constitutional law]. Erlangga.
Titik Triwulan, & Febrian, S. (2010). Perlindungan hukum bagi pasien [Legal protection for patients]. Prestasi Pustaka.
Constitution of the Republic of Indonesia of 1945.
Indonesian Civil Code (Kitab Undang-Undang Hukum Perdata).
Law No. 8 of 1999 on Consumer Protection.
Law No. 39 of 1999 on Human Rights.
Law No. 11 of 2008 on Electronic Information and Transactions, as amended by Law No. 19 of 2016.
Law No. 27 of 2022 on Personal Data Protection.
Government Regulation No. 71 of 2019 on the Implementation of Electronic Systems and Transactions.
Government Regulation No. 80 of 2019 on Trading Through Electronic Systems.
Regulation of the Minister of Communication and Informatics No. 20 of 2016 on Personal Data Protection in Electronic Systems.
Downloads
Published
How to Cite
Issue
Section
License
Copyright (c) 2026 Tandyo Budi Revita, Ni Ketut Wiratny, Erikson Sihotang
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
