LEGAL LIABILITY OF BUSINESS ENTITIES FOR VIOLATIONS OF CONSUMER PERSONAL DATA PROTECTION IN DIGITAL TRANSACTIONS IN INDONESIA: A LITERATURE REVIEW ON LEGAL CERTAINTY AND COMPENSATION MECHANISMS
DOI:
https://doi.org/10.5281/zenodo.23885167Keywords:
legal liability, personal data protection, consumers, legal certainty, compensationAbstract
The processing of personal data in digital transactions gives rise to a need for clarity regarding the liability of business operators and redress mechanisms for consumers who have suffered breaches. This study aims to analyse the legal certainty of business operators’ liability for breaches of consumer personal data protection, as well as redress mechanisms in digital transactions in Indonesia. The method employed is normative legal research through a literature review using a legislative and conceptual approach. Primary and secondary legal sources were analysed qualitatively through inventory, systematic interpretation and synthesis. The findings indicate that Law No. 27 of 2022 on the Protection of Personal Data and Law No. 8 of 1999 on Consumer Protection provide a normative foundation for business operators’ liability and the redress of consumer rights. Legal certainty requires clarity regarding the status of business operators as data controllers or processors, the basis for processing, security obligations, and the consequences of breaches. Redress mechanisms may be pursued through direct claims for redress, out-of-court settlements, or legal action in court in accordance with applicable jurisdiction and provisions. However, the implementation of remedies faces challenges regarding the identification of the liable party, access to evidence, proving a causal link, and the assessment of damages. This study concludes that clarity regarding liability norms must be linked to enforceable redress procedures. Strengthening consumer protection requires clarity on the forum for resolution, proportionate access to evidence, guidelines for assessing damages, and the enforcement of dispute resolution outcomes.
Downloads
References
Eliyah, E., & Aslan, A. (2025). STAKE’S EVALUATION MODEL: METODE PENELITIAN. Prosiding Seminar Nasional Indonesia, 3(2), Article 2.
Putri, T. S., & Putra, M. R. S. (2024). Implementasi Undang-Undang Pelindungan Data Pribadi: Peran Manajemen Risiko Hukum bagi Prosesor Data Pribadi. Jurnal Hukum Lex Generalis, 5(4). https://ojs.rewangrencang.com/index.php/JHLG/article/view/730
Rinjani, M. A., & Firmansyah, R. (2025). Hambatan Implementasi UU 27/2022 dan Strategi Penguatan Perlindungan Data Pribadi di Indonesia. Jurnal Analisis Hukum, 8(1), 70–83. https://doi.org/10.38043/jah.v8i1.6793
Rotimi, O. (2025). Digital Sovereignty and the Politics of Data Localization (SSRN Scholarly Paper No. 5921642). Social Science Research Network. https://doi.org/10.2139/ssrn.5921642
Salijeni, G., Samsonova-Taddei, A., & Turley, S. (2018). Big Data and Changes in Audit Technology: Contemplating a Research Agenda (SSRN Scholarly Paper No. 3148904). Social Science Research Network. https://papers.ssrn.com/abstract=3148904
Siregar, R. A., & Astuti, N. K. (2025). Assessing legal and institutional readiness for patient data protection in the age of big health data: An empirical study of health facilities in Indonesia. International Journal of Law, Policy and Social Review, 7(3), 15–21.
Sun, Y., Li, J., Lu, M., & Guo, Z. (2024, Maret 11). Study of the Impact of the Big Data Era on Accounting and Auditing. arXiv.Org. https://arxiv.org/abs/2403.07180v1
Supeno, S., Rosmidah, R., & Iqbal, S. M. U. (2025). Personal Data Protection in Review of Legal Theories and Principles. Journal of Law and Legal Reform, 6(3), 1349–1376. https://doi.org/10.15294/jllr.v6i3.10252
Takaryanto, D., & Lany, A. (2025). Legal Protection of Personal Data in the Exchange of Electronic Medical Record in Healthcare Services. Research Horizon, 5(6), 2817–2830. https://doi.org/10.54518/rh.5.6.2025.897
Taylor, R. D. (2020). “Data localization”: The internet in the balance. Telecommunications Policy, 44(8), 102003. https://doi.org/10.1016/j.telpol.2020.102003
Truli, E. (2018). The General Data Protection Regulation and Civil Liability. Dalam M. Bakhoum, B. Conde Gallego, M.-O. Mackenrodt, & G. Surblytė-Namavičienė (Ed.), Personal Data in Competition, Consumer Protection and Intellectual Property Law: Towards a Holistic Approach? (hlm. 303–329). Springer. https://doi.org/10.1007/978-3-662-57646-5_12
Ventura, M., & Coeli, C. M. (2018). Beyond privacy: The right to health information, personal data protection, and governance. Cadernos de Saúde Pública, 34, e00106818. https://doi.org/https://doi.org/10.1590/0102-311X00106818
Versaci, G. (2018). Personal Data and Contract Law: Challenges and Concerns about the Economic Exploitation of the Right to Data Protection. European Review of Contract Law, 14(4), 374–392. https://doi.org/10.1515/ercl-2018-1022
Vila Seoane, M. F. (2021). Data securitisation: The challenges of data sovereignty in India. Third World Quarterly, 42(8), 1733–1750. https://doi.org/10.1080/01436597.2021.1915122
Waruwu, S., & Siswoyo, A. A. (2024). DATA PRIBADI SEBAGAI ASET BISNIS: SINERGI HUKUM RAHASIA DAGANG DAN PERLINDUNGAN DATA. Lex Lectio Law Journal, 3(2), 118–129. https://doi.org/10.61715/jll.v3i2.118
Wiriani, E., Maknuni, J., Puspita, E. A., & Masitah, M. (2025). Peran Artificial Intelligence dalam Mitigasi Risiko Transaksi Mobile Banking: Tinjauan Governansi dan Etika Data. Journal of Trends Economics and Accounting Research, 6(1), 103–111. https://doi.org/10.47065/jtear.v6i1.2223
Wooldridge, J. M. (2010). Econometric Analysis of Cross Section and Panel Data, second edition. MIT Press.
Xiaying, M. (2019). The Legal Attributes of Electronic Data and the Positioning of Data in Civil Law*. Social Sciences in China, 40(1), 82–99. https://doi.org/10.1080/02529203.2018.1519208
Yu, X., & Zhao, Y. (2019). Dualism in data protection: Balancing the right to personal data and the data property right. Computer Law & Security Review, 35(5), 105318. https://doi.org/10.1016/j.clsr.2019.04.001
Yudha, Sahril, I., & Atmadja3, D. A. R. W. (2025). Perlindungan Data Pribadi Konsumen, Dokumen dan Tanda Tangan Elektronik yang Dipergunakan oleh Pihak Ketiga dalam Transaksi E-Commerce. CENDEKIA : Jurnal Penelitian Dan Pengkajian Ilmiah, 2(2), 173–189. https://doi.org/10.62335/cendekia.v2i2.897
Zamani, E. D., Smyth, C., Gupta, S., & Dennehy, D. (2023). Artificial intelligence and big data analytics for supply chain resilience: A systematic literature review. Annals of Operations Research, 327(2), 605–632. https://doi.org/10.1007/s10479-022-04983-y
Zed, M. (2008). Metode Penelitian Kepustakaan. Yayasan Pustaka Obor Indonesia.
Republik Indonesia. (1999). Undang-Undang Republik Indonesia Nomor 8 Tahun 1999 tentang Perlindungan Konsumen. Lembaran Negara Republik Indonesia Tahun 1999 Nomor 42, Tambahan Lembaran Negara Republik Indonesia Nomor 3821.
Republik Indonesia. (2022). Undang-Undang Republik Indonesia Nomor 27 Tahun 2022 tentang Pelindungan Data Pribadi. Lembaran Negara Republik Indonesia Tahun 2022 Nomor 196, Tambahan Lembaran Negara Republik Indonesia Nomor 6820.
UU PDP: (Republik Indonesia, 2022), dengan nomor pasal bila diperlukan.
UUPK: (Republik Indonesia, 1999), dengan nomor pasal bila merujuk ketentuan tertentu.
