PERLINDUNGAN HUKUM TERHADAP DATA PRIBADI KONSUMEN DALAM TRANSAKSI E-COMMERCE DI INDONESIA
DOI:
https://doi.org/10.23969/jp.v11i02.56700Keywords:
Stock Prices. Personal Data Protection; E-Commerce; PDP Law; Digital Consumer; Regulatory HarmonizationAbstract
The enactment of Law Number 27 of 2022 on Personal Data Protection (PDP Law) marks a new chapter in data governance in Indonesia, particularly within the rapidly expanding electronic commerce ecosystem. This study aims to analyze the legal framework for the protection of consumers' personal data in e-commerce transactions following the enforcement of the PDP Law, as well as to identify normative gaps that may undermine the effectiveness of such protection. This research employs a normative legal research method with a statute approach and a conceptual approach, utilizing primary legal materials in the form of relevant legislation and secondary legal materials comprising scholarly literature, legal doctrine, and pertinent judicial decisions. The findings reveal that the PDP Law has established a more comprehensive legal foundation than its predecessor regulations, particularly through the codification of the consent principle, data subject rights, and obligations incumbent upon data controllers; nevertheless, several normative disharmonies were identified between the PDP Law and Law Number 11 of 2008 as amended by Law Number 19 of 2016 on Electronic Information and Transactions, as well as Law Number 8 of 1999 on Consumer Protection, with the absence of a functionally operational independent supervisory body during the transitional period constituting a structural impediment to legal enforcement. This study concludes that cross-sectoral regulatory harmonization and the establishment of an effective data protection authority are indispensable prerequisites for the substantive realization of consumer personal data protection in Indonesia's e-commerce transactions.
Downloads
References
Arouri, M. E. H., & Fouquau, J. (2009). On the short-term influence of oil price changes on stock markets in GCC countries: linear and nonlinear analyses.
Arifiyadi, T., & Latifah, N. A. (2024). Problematika penegakan hukum perlindungan data pribadi di Indonesia pascaberlakunya UU PDP. Jurnal Legislasi Indonesia, 21(1), 55–72.
Badan Pusat Statistik. (2024). Statistik e-commerce 2024. Badan Pusat Statistik Republik Indonesia.
Badan Siber dan Sandi Negara. (2024). Laporan keamanan siber nasional 2024. BSSN.
Bygrave, L. A. (2020). Data privacy law: An international perspective. Oxford University Press.
CNN Indonesia. (2023, 31 Desember). Daftar dugaan kebocoran data 2023, termasuk data pemilih dan bank. CNN Indonesia.
Cube Asia. (2024). Southeast Asia e-commerce report 2024: Net merchandise value analysis. Cube Asia Research.
European Data Protection Board. (2023). Guidelines on data protection impact assessment (DPIA). EDPB.
Fadhli, Y. Z., & Shalihah, F. (2021). Perlindungan hukum data pribadi sebagai bagian dari hak asasi manusia atas privasi dalam perdagangan online.
Jurnal Hukum Ius Quia Iustum, 28(1), 78–99.
Friedman, L. M. (2021). The legal system: A social science perspective. Russell Sage Foundation.
GoodStats. (2024, 2 Juli). 300 juta data pribadi tersebar, kapan Indonesia merdeka dari serangan siber? GoodStats.
GoodStats. (2025, 29 Maret). Nilai transaksi e-commerce Indonesia capai Rp487 triliun pada 2024. GoodStats.
Hadjon, P. M. (1987). Perlindungan hukum bagi rakyat Indonesia. Bina Ilmu.
IDN Times. (2024, 24 September). Kasus kebocoran data pribadi di era Presiden Jokowi. IDN Times.
Indonesian Cyber Security Forum. (2024). Laporan tahunan keamanan siber Indonesia 2024. ICSF.
Indonesia. Peraturan Pemerintah Nomor 71 Tahun 2019 tentang Penyelenggaraan Sistem dan Transaksi Elektronik. Lembaran Negara Republik Indonesia Tahun 2019 Nomor 185.
Indonesia. Undang-Undang Nomor 8 Tahun 1999 tentang Perlindungan Konsumen. Lembaran Negara Republik Indonesia Tahun 1999 Nomor 42.
Indonesia. Undang-Undang Nomor 11 Tahun 2008 tentang Informasi dan Transaksi Elektronik. Lembaran Negara Republik
Indonesia Tahun 2008 Nomor 58.
Indonesia. Undang-Undang Nomor 19 Tahun 2016 tentang Perubahan atas Undang-Undang Nomor 11 Tahun 2008 tentang Informasi dan Transaksi Elektronik. Lembaran Negara Republik Indonesia Tahun 2016 Nomor 251.
Indonesia. Undang-Undang Nomor 27 Tahun 2022 tentang Perlindungan Data Pribadi. Lembaran Negara Republik Indonesia Tahun 2022 Nomor 196.
Katadata. (2023, 31 Juli). Data pribadi terserak, nasib sial masyarakat hadapi kebocoran data. Katadata.co.id.
Kementerian Komunikasi dan Informatika. (2024). Laporan penanganan kasus kebocoran data pribadi 2019–2024. Kemenkominfo.
Kementerian Perdagangan Republik Indonesia. (2025). Kinerja perdagangan melalui sistem elektronik 2024–2025. Badan Kajian dan Pengembangan Perdagangan Kemendag.
Kompas.id. (2024, 3 Juni).
Kemenkominfo tangani 111 kasus kebocoran data pribadi pada 2019–14 Mei 2024. Kompas.id.
Kompas.id. (2025, 29 November). Kebocoran data pribadi terus mengancam, lembaga pengawas tak kunjung dibentuk. Kompas.id.
Kuner, C. (2020). Transborder data flows and data privacy law. Oxford University Press.
Kuner, C. (2020). International governance of data protection: Convergence and divergence in global frameworks. International Data Privacy Law, 10(3), 208–224.
LBS Urun Dana. (2025, 27 Februari). Orang Indonesia doyan belanja online, transaksinya tembus triliunan. LBS Urun Dana.
Lembaga Studi dan Advokasi Masyarakat. (2024). Laporan kebocoran data pribadi platform digital di Indonesia. ELSAM.
Mahesa, R., & Wulandari, T. (2023). Implementasi perlindungan data pribadi dalam platform e-commerce pasca UU PDP. Jurnal Hukum dan Teknologi, 4(2), 82–98.
Mandiri Institute. (2025). Cashing in on the digital boom: E-commerce transaction report March 2025. Bank Mandiri.
Marzuki, P. M. (2021). Penelitian hukum (Edisi Revisi). Kencana Prenada Media Group.
Ohm, P. (2010). Broken promises of privacy: Responding to the surprising failure of anonymization. UCLA Law Review, 57(6), 1701–1777.
Rani, M., & Widodo, R. B. (2023). Perlindungan konsumen dalam transaksi e-commerce: Analisis terhadap Undang-Undang Nomor 27 Tahun 2022. Jurnal Hukum dan Pembangunan, 53(2), 201–220.
Riswandi, B. A., & Astuti, S. R. D. (2022). Kebijakan hukum perlindungan data pribadi di era ekonomi digital: Studi perbandingan Indonesia dan Uni Eropa. Jurnal Dinamika Hukum, 22(1), 35–54.
Rosadi, S. D., & Pratama, G. G. (2020). Protecting privacy of personal data in the digital economic era: The urgency of establishing legal framework. Padjadjaran Journal of Law, 7(2), 147–165.
Solove, D. J. (2022). The digital person: Technology and privacy in the information age. New York University Press.
Solove, D. J. (2022). The myth of the privacy paradox. George Washington Law Review, 89(1), 1–51.
Downloads
Published
Issue
Section
License
Copyright (c) 2026 Pendas : Jurnal Ilmiah Pendidikan Dasar
This work is licensed under a Creative Commons Attribution 4.0 International License.
