PERLINDUNGAN KONSUMEN ATAS DATA PRIBADI DALAM TRANSAKSI E-COMMERCE PASCA BERLAKUNYA UNDANG-UNDANG NOMOR 1 TAHUN 2024

Abstract

This study analyzes the legal protection of consumers personal data in e-commerce transactions in Indonesia following the enactment of Law Number 27 of 2022 on Personal Data Protection, which took effect on October 17, 2024, and Law Number 1 of 2024 on the Second Amendment to the Electronic Information and Transactions (ITE) Law. The rapid growth of e-commerce in Indonesia reaching 78 percent has not been matched by adequate personal data protection, as evidenced by various data breach cases, such as the exposure of 91 million Tokopedia user accounts. The findings indicate that these laws provide a comprehensive legal framework regulating data subjects rights, data controllers obligations, supervisory mechanisms through the establishment of the Personal Data Protection Supervisory Authority, and a tiered sanction system that includes criminal penalties of up to 7 years imprisonment and a maximum fine of 6 billion rupiah. However, their implementation still faces technical and operational challenges, as well as low consumer awareness.