Legal Protection for E-Commerce Consumers Against Personal Data Leaks

Legal protection for e-commerce consumers in the event of personal data leaks is crucial, as this data not only relates to individual privacy rights but also impacts aspects of state sovereignty. This study aims to analyze such legal protection, focusing on the implementation of Law Number 27 of 2022 concerning Personal Data Protection. The research addresses two main issues: first, the legal responsibilities of e-commerce businesses concerning personal data leaks, exemplified by the Tokopedia case in 2020; and second, the legal challenges associated with cross-border data transfers, which serve as the basis for a judicial review request to the Constitutional Court. The study employs a normative juridical method to examine the alignment of national legal norms with digital data management practices and the developments in international law. The findings indicate that while Law Number 27 of 2022 has strengthened the national legal framework, there are still gaps in supervision, law enforcement, and mechanisms for transferring data to foreign entities. This research aims to provide recommendations for the government, regulatory agencies, and businesses to enhance Indonesia's digital sovereignty and ensure the protection of consumer privacy rights.

Legal Protection, Consumers, E-Commerce, Personal Data Leakage, Cross-Border Data Transfer.

1. Aji, D. B. P. (2023). Protection of Personal Data in Online Transactions Study of Decision Number 235/Pdt. G/2020/Pn. Jkt. Pst. [Google Scholar] [Crossref]

2. Aulia, E. (2024). Analisis Pasal 56 dalam Undang-Undang Nomor 27 Tahun 2022 Tentang Pelindungan Data Pribadi dari Perspektif Kepastian Hukum. UNES Law Review, 7(1), 220–227. https://review-unes.com/index.php/law/article/view/2267 [Google Scholar] [Crossref]

3. Bainus, A., & Rachman, J. B. (2018). Kepentingan Nasional dalam Hubungan Internasional. Intermestic: Journal of International Studies, 2(2), 109–115. [Google Scholar] [Crossref]

4. https://intermestic.unpad.ac.id/index.php/intermestic/article/download/74/34 [Google Scholar] [Crossref]

5. Benuf, K., Mahmudah, S., & Priyono, E. A. (2019). Perlindungan Hukum Terhadap Keamanan Data Konsumen Financial Technology Di Indonesia: Indonesia. Refleksi Hukum: Jurnal Ilmu Hukum, 3(2), 145–160. https://ejournal.uksw.edu/refleksihukum/article/view/2413 [Google Scholar] [Crossref]

6. Clifford, D., Graef, I., & Valcke, P. (2019). Pre-formulated declarations of data subject consent—Citizen-consumer empowerment and the alignment of data, consumer and competition law protections. German Law Journal, 20(5), 679–721. [Google Scholar] [Crossref]

7. Eleanora, F. N., & Dewi, A. S. (2022). Pelaksanaan Perjanjian Baku dan Akibat Hukumnya bagi Konsumen. Jurnal Mercatoria, 15(1), 19–27. [Google Scholar] [Crossref]

8. https://ojs.uma.ac.id/index.php/mercatoria/article/view/6812 [Google Scholar] [Crossref]

9. Geraldo, V. (2022). Kerja Sama Indonesia-Singapura Di Bidang Ekonomi Digital Melalui Pembentukan Kawasan Ekonomi Khusus Nongsa Digital Park Di Batam (2018-2020). Jurnal Ilmu Hubungan Internasional LINO, 2(2), 128–142. https://ojs.unsulbar.ac.id/index.php/lino/article/view/1746 [Google Scholar] [Crossref]

10. Hamid, M. G. F. (n.d.). Penyelesaian Sengketa Konsumen di Platform Tokopedia (Studi Putusan 235/Pdt. G/2020/Pn. Jkt. Pst). Retrieved 19 November 2025. [Google Scholar] [Crossref]

11. Komalawati, D., MR, M. D., & Kartika, R. D. (2021). Kejutan Puluhan Miliar Tokopedia Ditengah Kasus Kebocoran Data. ., 2(1), 49–56. [Google Scholar] [Crossref]

12. https://jurnalsyntaxadmiration.com/index.php/jurnal/article/download/167/249 [Google Scholar] [Crossref]

13. Kusuma, S. C. B. (2023). Tinjauan Normatif Konsep Perlindungan Hukum Hak Privat Warga Negara Dalam Undang-Undang Nomor 27 Tahun 2022 Tentang Pelindungan Data Pribadi [PhD Thesis, Universitas Islam Sultan Agung Semarang]. http://repository.unissula.ac.id/id/eprint/31440 [Google Scholar] [Crossref]

14. Muhammad, M. O., & Nugroho, L. D. (2021a). Perlindungan Hukum Terhadap Pengguna Aplikasi E-Commerce Yang Terdampak Kebocoran Data Pribadi. Jurnal Pamator: Jurnal Ilmiah Universitas Trunojoyo, 14(2), 165–174. https://journal.trunojoyo.ac.id/pamator/article/view/12472 [Google Scholar] [Crossref]

15. Muhammad, M. O., & Nugroho, L. D. (2021b). Perlindungan Hukum Terhadap Pengguna Aplikasi E-Commerce Yang Terdampak Kebocoran Data Pribadi. Jurnal Pamator: Jurnal Ilmiah Universitas Trunojoyo, 14(2), 165–174. https://journal.trunojoyo.ac.id/pamator/article/view/12472 [Google Scholar] [Crossref]

16. Novita, Y. D., & Santoso, B. (2021). Urgensi pembaharuan regulasi perlindungan konsumen di era bisnis digital. Jurnal Pembangunan Hukum Indonesia, 3(1), 46–58. [Google Scholar] [Crossref]

17. https://ejournal2.undip.ac.id/index.php/jphi/article/view/10233 [Google Scholar] [Crossref]

18. Nurani, E., Wiryanto, W., & Riyanto, S. (2023). Optimalisasi Perlindungan Konsumen Atas Kebocoran Pengelolaan Data Pribadi Dalam Pinjaman Online. Jurnal Hukum Jurisdictie, 5(2), 51–69. https://dev-ojs.journalfhuia.ac.id/Jurisdictie/article/view/133 [Google Scholar] [Crossref]

19. Pohan, T. D., & Nasution, M. I. P. (2023). Perlindungan Hukum Data Pribadi Konsumen Dalam Platform E Commerce. Sammajiva: Jurnal Penelitian Bisnis Dan Manajemen, 1(3), 42–48. https://e-journal.nalanda.ac.id/index.php/SAMMAJIVA/article/view/336 [Google Scholar] [Crossref]

20. Prabowo, T. B., & Sihaloho, R. A. (2023). Analisis ketergantungan indonesia pada teknologi asing dalam sektor energi dan dampaknya pada keamanan nasional. Jurnal Lemhannas RI, 11(1), 72–82. https://jurnal.lemhannas.go.id/index.php/jkl/article/view/426 [Google Scholar] [Crossref]

21. Putri, L. E. (2023). Pengaruh E-Commerce Terhadap Perkembangan Usaha Di Indonesia. JURNAL TAFIDU, 2(1), 42–52. [Google Scholar] [Crossref]

22. Putri, T. B., Dewi, S., & Priowirjanto, E. S. (2025). Aspek Hukum Praktik Penghapusan Akun Pengguna Sistem Elektronik Secara Sepihak untuk Memoderasi Konten Oleh Marketplace Menurut Peraturan Menteri Komunikasi dan Informatika Nomor 5 Tahun 2020 tentang Penyelenggara Sistem Elektronik Lingkup Privat. JURNAL HUKUM, POLITIK DAN ILMU SOSIAL, 4(1), 10–27. [Google Scholar] [Crossref]

23. https://ejurnal.politeknikpratama.ac.id/index.php/jhpis/article/view/4550 [Google Scholar] [Crossref]

24. Rosadi, S. D. (2023). Pembahasan UU Pelindungan Data Pribadi (UU RI No. 27 Tahun 2022). Sinar Grafika. [Google Scholar] [Crossref]

25. Sari, K. A. (2023). Integrasi Hukum Perlindungan Konsumen Dan Persaingan Usaha Atas Data Pribadi Konsumen Pada Platform Digital. UNES Law Review, 6(1), 1936–1947. https://www.review-unes.com/law/article/view/954. [Google Scholar] [Crossref]

26. Sari, V. A., & Hanifah Febriani, S. H. (2025a). Perlindungan Hukum Terhadap Penyalahgunaan Data Pribadi Dalam e-Commerce (Studi Putusan Nomor 235/Pdt. G/2020/PN. Jkt. Pst) [PhD Thesis, Universitas Muhammadiyah Surakarta]. https://eprints.ums.ac.id/id/eprint/132219 [Google Scholar] [Crossref]

27. Sari, V. A., & Hanifah Febriani, S. H. (2025b). Perlindungan Hukum Terhadap Penyalahgunaan Data Pribadi Dalam e-Commerce (Studi Putusan Nomor 235/Pdt. G/2020/PN. Jkt. Pst) [PhD Thesis, Universitas Muhammadiyah Surakarta]. https://eprints.ums.ac.id/id/eprint/132219 [Google Scholar] [Crossref]

28. Sitorus, S. Y. H. (2023). Perlindungan Hukum Data Pribadi Pengguna Layanan Pinjam Meminjam Uang Berbasis Teknologi Informasi Ditinjau dari Undang-Undang No. 27 Tahun 2022 tentang Perlindungan Data Pribadi [PhD Thesis, Universitas Kristen Indonesia]. http://repository.uki.ac.id/11540/ [Google Scholar] [Crossref]

29. Sommaliagustina, D. (2018). Perlindungan hukum terhadap konsumen e-commerce di Indonesia. Journal Equitable ISSN, 2541, 7037. http://download.garuda.kemdikbud.go.id/article.php? [Google Scholar] [Crossref]

30. Sulistianingsih, D., Ihwan, M., Setiawan, A., & Prabowo, M. S. (2023). Tata kelola perlindungan data pribadi di era metaverse (telaah yuridis undang-undang perlindungan data pribadi). Masalah-Masalah Hukum, 52(1), 97–106. https://ejournal.undip.ac.id/index.php/mmh/article/view/51319 [Google Scholar] [Crossref]

31. Suyanto, M. (2003). Strategi Periklanan pada E-commerce Perusahaan Top Dunia. Penerbit Andi: Yogyakarta. [Google Scholar] [Crossref]

32. Umboh, A. (2018). Tanggung Jawab Pelaku Usaha Dalam Pemenuhan Hak Konsumen Menurut Hukum Positif Indonesia. Lex Privatum, 6(6). [Google Scholar] [Crossref]

33. https://ejournal.unsrat.ac.id/index.php/lexprivatum/article/view/21498 [Google Scholar] [Crossref]

34. Widjaja, G. (2025). Pengaruh Perjanjian Perdagangan Internasional Terhadap Kebijakan Perlindungan Data Pribadi. Sibatik Journal: Jurnal Ilmiah Bidang Sosial, Ekonomi, Budaya, Teknologi, Dan Pendidikan, 4(4), 345–354. https://publish.ojs-indonesia.com/index.php/SIBATIK/article/view/2659 [Google Scholar] [Crossref]

35. Wulandari, S. A., Aliyah, K. K., Faradilla, A. N., & Agustina, S. A. (2024). Implikasi Hukum Privasi Data Internasional terhadap Pilihan Konsumen dalam Penggunaan E-Commerce Lintas Negara. Indonesian Journal of Social Sciences and Humanities, 4(2), 82–87. http://journal.publication-center.com/index.php/ijssh/article/view/1739 [Google Scholar] [Crossref]

36. Zahwani, S. T., & Nasution, M. I. P. (2024). Analisis Kesadaran Masyarakat Terhadap Perlindungan Data Pribadi di Era Digital. Journal of Sharia Economics Scholar (JoSES), 2(2).https://ojs.unimal.ac.id/joses/article/view/17122 [Google Scholar] [Crossref]

• Conflict of Law in the Safeguarding of Malaysian Intangible Cultural Heritage: A Way Forward
• Alternative Dispute Resolution in India: A Brief Overview Justice Delayed is Justice Denied. - William E. Gladstone
• The Role of Museums in Safeguarding Cultural Heritage Rights: Balancing Access and Repatriation
• An Evaluation of the Universal Declaration of Human Rights' Significance and Application in Nigeria
• The Role of International Law in Shaping National Immigration Policies.