Legal Gaps in Personal Data Protection and E-Commerce Responsibilities in Indonesia

Sobandi Sobandi, Noorita Rusiana Indriati

Abstract


This study analyzes the legal gaps in personal data protection and the responsibilities of e-commerce business actors in Indonesia, focusing on Law Number 27 of 2022 concerning Personal Data Protection, especially Articles 55–56 concerning cross-border data transfers, as well as Law Number 8 of 1999 concerning Consumer Protection and Government Regulation Number 80 of 2019 concerning Commerce Through Electronic Systems. Using a normative legal approach supported by literature studies and comparative analysis, this study identifies regulatory weaknesses, such as the absence of explicit consent requirements in cross-border data transfers and the continued use of exoneration clauses that are detrimental to consumers. Comparisons with the Malaysian Personal Data Protection Act and the European General Data Protection Regulation show that Indonesia lags behind in aspects of compliance, supervision, and consumer protection. The results of the study show that unclear regulations and weak law enforcement mechanisms increase the risk of misuse of personal data and hinder the growth of the digital economy. Here, legal reform is needed in the form of explicit consent obligations, elimination of clauses that are detrimental to consumers, and strengthening the supervisory role of Ministry of Communication and Information and Business Competition Supervisory Commission, as well as the establishment of alternative dispute resolution mechanisms.


Keywords


Personal Data Protection; Cross-Border Data; E-Commerce; Consumer Rights; Legal Harmonization

Full Text:

PDF

References


Books:

Akbar, Mohammad Aldrin, and Sitti Nur Alam. E-commerce: Dasar teori dalam bisnis digital. Medan, Yayasan Kita Menulis, 2020.

Budhijanto, Danrivanto. Revolusi cyberlaw Indonesia: pembaruan dan revisi Undang-Undang Informasi dan Transaksi Elektronik 2016. Bandung, PT Refika Aditama, 2017.

Gani, Taufiq A. Kedaulatan data digital untuk integritas bangsa. Aceh, Syiah Kuala University Press, 2023.

Prasetyo, Teguh, and Abdul Halim Barkatullah. Bisnis e-commerce: Suatu sistem keamanan dan hukum di Indonesia. Yogyakarta, Pustaka Pelajar, 2005.

Ramli, Ahmad M. Cyber Law dan HAKI dalam Sistem Hukum Indonesia. Bandung, Refika Aditama, 2004.

Rosadi, Sinta Dewi. Cyber law: aspek data privasi menurut hukum internasional, regional, dan nasional. Bandung, Refika Aditama, 2015.

Sidharta. Hukum Perlindungan Konsumen Indonesia. Jakarta, PT Grasindo, 2000.

Sugeng. Hukum Telematika. Jakarta, Prenadamedia Group, 2020.

Sugiyono. Kamus Bahasa Indonesia. Jakarta, Pusat Bahasa, 2008.

PhD diss:

Irawan, Meisel Rusli. Perlindungan Terhadap Data Pribadi Pengguna Aplikasi Perdagangan Elektronik. PhD diss, Podomoro University, 2023;

Website:

Ulfa, Maulina. Deretan Kebocoran Data E-Commerce dan Sektor Perbankan, Seberapa Bahaya?. IDX Channel, September 12, 2022. https://www.idxchannel.com/economics/deretan-kebocoran-data-e-commerce-dan-sektor-perbankan-seberapa-bahaya/2.

Asosiasi Penyelenggara Jasa Internet Indonesia (APJII). APJII: Jumlah Pengguna Internet Indonesia Tembus 221 Juta Orang. APJII, February 7, 2024, https://apjii.or.id/berita/d/apjii-jumlah-pengguna-internet-indonesia-tembus-221-juta-orang-.

Journals:

Adytia, Nur Amalina Putri, Syarif Zakaria Said Wachdin, and Said Said. “The Legal Framework for Personal Data Protection in the Digital Era as Fulfillment of Privacy Rights in Indonesia.” KnE Social Sciences 12, no. 3 (2024): 692-700.

Arrasuli, Beni Kharisma, and Khairul Fahmi. “Perlindungan hukum positif Indonesia terhadap kejahatan penyalahgunaan data pribadi.” UNES Journal of Swara Justisia 7, no. 2 (2023): 369-392.

Ayunda, Rahmi. “Personal Data Protection to E-Commerce Consumer: What Are the Legal Challenges and Certainties?.” Law Reform 18, no. 2 (2022): 144-163.

Azhari, Arfi. “Legal review of consumer law protection on personal data on digital platform.” Indonesia Private Law Review 2, no. 1 (2021): 59-72.

Fahamsyah, Ermanto, Kania Venisa Rachim, Ramadhan Dwi Saputra, and Vicko Taniady. “Navigating Fintech Sharia Regulation In Indonesia: Lessons Learned From Malaysia.” Malaysian Journal of Syariah and Law 13, no. 1 (2025): 179-192.

Fathaniyah, Lidia, Mohammad Makbul, and M. Makhrus. “Urgensi Perlindungan Data Pribadi pada Transaksi e-Commerce Terhadap Pembangunan Ekonomi di Indonesia.” Jurnal Hukum Ekonomi Syariah 6, no. 2, (2023): 77-88.

Haganta, Raphael. “Legal Protection of Personal Data as Privacy Rights of E-Commerce Consumers Amid the Covid-19 Pandemic.” Lex Scientia Law Review 4, no. 2 (2020): 77-90.

Hertianto, M. Rafifnafia. “Sistem Penegakan Hukum Terhadap Kegagalan Dalam Perlindungan Data Pribadi Di Indonesia.” Kertha Patrika 43, no. 1 (2021): 21-35.

Humaira, Anisya, and Kukuh Tejomurti. “Analysis of consumer personal data protection for data integration: the Gojek-Tokopedia case.” Indonesian Journal of Law and Policy Studies 3, no. 1 (2022): 20-31.

Kartika, Yuly Sari, and Wiwin Yulianingsih. “Kajian Yuridis Tindak Pidana Pemalsuan Identitas Data Diri Dalam Situs Bantuan Kartu Prakerja.” JURNAL RECTUM: Tinjauan Yuridis Penanganan Tindak Pidana, Vol.5, no. 2 (2023): 1-11.

Kumalaratri, Giosita. “Urgency of the Personal Data Protection Bill on Privacy Rights in Indonesia.” Jurnal Hukum 37, no. 1 (2021): 1-13.

Marischa, Diva, and Reni Budi Setianingrum. “Transfer of Personal Data by E-Commerce Companies: A Study from the Perspective of Indonesian Personal Data Protection Laws.” Ikatan Penulis Mahasiswa Hukum Indonesia Law Journal 4, no. 1 (2024): 48-64.

Nugroho, Inaz Indra, Reza Pratiwi, and Salsabila Rahma Az Zahro. “Optimalisasi penanggulangan kebocoran data melalui regulatory blockchain guna mewujudkan keamanan siber di Indonesia.” Ikatan Penulis Mahasiswa Hukum Indonesia Law Journal 1, no. 2 (2021): 115-129.

Orinaldi, Mohammad. “Peran e-commerce dalam meningkatkan resiliensi bisnis diera pandemi.” ILTIZAM Journal of Shariah Economics Research 4, no. 2 (2020): 36-53.

Rahardjo, Tanti Malaka Sari, Himawan Noerdjaja, Gumilang Eka Pambudi, and M. Shidqon Prabowo. “Consumer Protection Legal Frameworks in Indonesia: The Challenges of E-Commerce and Data Privacy.” Research Horizon 5, no. 2 (2025): 119-128.

Rahman, Faiz. “Safeguarding Personal Data In The Public Sector: Unveiling The Impact Of The New Personal Data Protection Act In Indonesia.” UUM Journal of Legal Studies 16, no. 1 (2025): 1-18.

Riyadi, Gillang Achmad, and Toto Tohir Suriaatmadja. “Perlindungan Hukum Atas Kebocoran Data Pribadi Konsumen PT PLN Dihubungkan Dengan Hak Atas Keamanan Pribadi Ditinjau Dari Undang-Undang Nomor 27 Tahun 2022 Tentang Perlindungan Data Pribadi.” Law Studies 3, no. 1 (2023): 226-231.

Rizal, Muhammad Saiful. “Perbandingan Perlindungan Data Pribadi Indonesia dan Malaysia.” Jurnal Cakrawala Hukum 10, no. 2 (2019): 218-227.

Rosadi, Sinta Dewi. “Protecting privacy on personal data in digital economic era: Legal framework in Indonesia.” Brawijaya Law Journal 5, no. 1 (2018): 143-157.

Santoso, Edy. “Opportunities and challenges: e-commerce in Indonesia from a legal perspective.” Jurnal Penelitian Hukum De Jure 22, no. 3 (2022): 395-410.

Setiawan, Herdi, Mohammad Ghufron, and Dewi Astutty Mochtar. “Perlindungan Hukum Terhadap Data Pribadi Konsumen Dalam Transaksi e-Commerce.” MLJ Merdeka Law Journal 1, no. 2 (2020): 102-111.

Silviani, Ninne Zahara, Rina Shahriyani Shahrullah, Vanessa Riarta Atmaja, and Park Ji Hyun. “Personal Data Protection in Private Sector Electronic Systems for Businesses: Indonesia vs. South Korea.” Jurnal Hukum dan Peradilan 12, no. 3 (2023): 517-546.

Wibowo, Ari, Widya Alawiyah, and Azriadi. “The importance of personal data protection in Indonesia’s economic development.” Cogent Social Sciences, Vol.10, no. 1 (2024) 2306751.

Yudistira, Muhammad, and Ramadani Ramadani. “Tinjauan Yuridis Terhadap Efektivitas Penanganan Kejahatan Siber Terkait Pencurian Data Pribadi Menurut Undang-Undang No. 27 Tahun 2022 oleh KOMINFO.” UNES Law Review 5, no. 4 (2023): 3917-3929.

Yuniarti, Siti. “Perlindungan hukum data pribadi di Indonesia.” Business Economic, Communication, and Social Sciences Journal (BECOSS) 1, no. 1 (2019): 147-154.




DOI: http://dx.doi.org/10.26532/ijlr.v9i1.45253

Refbacks

  • There are currently no refbacks.


Creative Commons License
This work is licensed under a Creative Commons Attribution 4.0 International License.


International Journal of Law Reconstruction Indexed by :

DOAJgoogle_scholarsintacrossrefMendeley onesearch  dimension


International Journal of Law Recnstruction  
Faculty of Law, UnissulaCopyright of International Journal of Law Reconstruction
Jalan Kaligawe Raya KM.4, Terboyo Kulon, Genuk, E-ISSN 2580-9245 (Online)
Semarang, Central Java, Indonesia, 50112IJLR is licensed under a