Melola Discovery

← Melola Discovery

Akses terbuka Jurnal

Legal Gaps and Risks in Consumer Data Processing: An Analysis of Indonesian E-Commerce under the Personal Data Protection Law

Journal of Private and Commercial Law · Vol. 8 No. 2 (2024) · hlm. 209–240

DOI
10.15294/jpcl.v8i2.20081
ISSN
2599-0306, 2599-0314
Terbit
2024-11-30
Penerbit
Universitas Negeri Semarang
Bahasa
eng
Lisensi
creativecommons.org/licenses/by-nc/4.0

Abstrak

The advancement of information and communication technology has significantly eroded traditional privacy boundaries, particularly within Indonesia’s rapidly growing e-commerce sector. The increasing volume and value of online transactions have intensified the collection and processing of consumer personal data, thereby amplifying legal and commercial risks at every stage of data processing. This study aims to analyze the forms of risks arising at each stage of personal data processing on e-commerce websites, as stipulated in Article 16 of Law No. 27 of 2022 on Personal Data Protection, while also identifying existing legal gaps in its implementation. This research adopts a normative juridical approach, employing library-based legal research focused on statutory and conceptual analysis. The findings demonstrate that distinct risks emerge across different stages of personal data processing, both prior to and following data storage by data controllers. Key risks include non-compliant data collection practices, lack of transparency, excessive and unlawful data collection, as well as unauthorized access, disclosure, modification, misuse, destruction, and loss of personal data. These risks are further exacerbated by ambiguities in regulatory provisions, particularly regarding consent standards, accountability mechanisms, and enforcement. This study contributes to the discourse in private and commercial law by offering a stage-based risk mapping of personal data processing within Indonesian e-commerce, highlighting specific regulatory shortcomings under the Personal Data Protection Law. It provides a nuanced understanding of how legal gaps translate into practical vulnerabilities for consumers. The research also proposes practical mitigation measures, including regular system updates and strengthening the capacity of human resources responsible for data processing, to enhance compliance and consumer data protection in Indonesia’s digital economy.

Kata kunci

Jaringan kolaborasi para penulis

40 penulis · 130 tautan kepenulisan bersama · menampilkan 40 yang paling banyak terhubung

Arahkan kursor atau ketuk sebuah nama untuk menyorot rekan penulisnya. Klik dua kali untuk membuka halaman penulis.

  • Afiliasi tidak diketahui
  • Organisasi berbeda
  • Organisasi sama
  • Afiliasi tidak diketahui
  • Garis lebih tebal = lebih banyak artikel bersama · lingkaran lebih besar = lebih banyak artikel
Tampilkan sebagai tabel
Rekan penulisOrganisasiArtikel bersama
Nurul FibriantiAfiliasi tidak diketahui12
Ridwan ArifinAfiliasi tidak diketahui5
Niken Diah ParamitaAfiliasi tidak diketahui3
Mohammad Raziq FakhrullahAfiliasi tidak diketahui3
Asmarani RamliAfiliasi tidak diketahui3
Akbar Jihadul IslamAfiliasi tidak diketahui2
Abdullah Mufti Abdul RahmanAfiliasi tidak diketahui2
Aprila NiravitaAfiliasi tidak diketahui2
Rio Taufik AnsoriAfiliasi tidak diketahui2
Saniya PuspitasariAfiliasi tidak diketahui2
Vira AzraAfiliasi tidak diketahui2
Natasya Fitri DewantiAfiliasi tidak diketahui2
Salisa Widyaning KinasihAfiliasi tidak diketahui2
Siti Hafsyah IdrisAfiliasi tidak diketahui2
Ali MasyharAfiliasi tidak diketahui2
Moh SamanAfiliasi tidak diketahui2
Diyah Anggun FebriyantiAfiliasi tidak diketahui2
Bayyinatun AfifahAfiliasi tidak diketahui2
Chatila MaharaniAfiliasi tidak diketahui2
Maylia Pramono SariAfiliasi tidak diketahui2
Anisa Okta VianaAfiliasi tidak diketahui2
Martitah MartitahAfiliasi tidak diketahui2
Rizky Andeza PrasetyaAfiliasi tidak diketahui2
Sergi Fernandez AlejandroAfiliasi tidak diketahui2
Rahayu Fery AnitasariAfiliasi tidak diketahui1
TRI ANDARI DAHLANAfiliasi tidak diketahui1
Ketut Elly SutrisniAfiliasi tidak diketahui1
I Gede Agus KurniawanAfiliasi tidak diketahui1
Anak Agung Ayu Ngurah Sri Rahayu GordaAfiliasi tidak diketahui1
Princess Alyssa Tee-anastacioAfiliasi tidak diketahui1
R Benny RiyantoAfiliasi tidak diketahui1
Adnan Ibrahim SarhanAfiliasi tidak diketahui1
Irawaty IrawatyAfiliasi tidak diketahui1

Afiliasi berasal dari OpenAlex; metadata OAI-PMH jurnal tidak memuatnya. Penulis tanpa ID OpenAlex dicocokkan berdasarkan nama, sehingga dua orang bisa tergabung atau satu orang bisa terpisah.

Sumber metadata: OAI-PMH (metadata jurnal) https://journal.unnes.ac.id/journals/jpcl/oai, pertama di-harvest 6 Nov 2026, terakhir terlihat 8 Nov 2026.
Metadata asli (oai_dc) 
<oai_dc:dc xmlns="http://www.openarchives.org/OAI/2.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:oai_dc="http://www.openarchives.org/OAI/2.0/oai_dc/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.openarchives.org/OAI/2.0/oai_dc/  http://www.openarchives.org/OAI/2.0/oai_dc.xsd">
	<dc:title xml:lang="en">Legal Gaps and Risks in Consumer Data Processing: An Analysis of Indonesian E-Commerce under the Personal Data Protection Law</dc:title>
	<dc:creator xml:lang="en">Putra, Tegar Islami</dc:creator>
	<dc:creator xml:lang="en">Fakhis, Adinda Zeranica Putri </dc:creator>
	<dc:creator xml:lang="en">Tussaleha, Anisa</dc:creator>
	<dc:creator xml:lang="en">Firdhausya, Mahima Umaela</dc:creator>
	<dc:creator xml:lang="en">Aflah, Muhammad Hilmi Naufal</dc:creator>
	<dc:creator xml:lang="en">Ezzerouali, Souad Ahmed</dc:creator>
	<dc:creator xml:lang="en">Banane, Mohamed Cheick</dc:creator>
	<dc:subject xml:lang="en">Personal Data Protection</dc:subject>
	<dc:subject xml:lang="en">E-Commerce</dc:subject>
	<dc:subject xml:lang="en">Data Processing Risks</dc:subject>
	<dc:subject xml:lang="en">Indonesian Law</dc:subject>
	<dc:subject xml:lang="en">Consumer Privacy</dc:subject>
	<dc:description xml:lang="en">The advancement of information and communication technology has significantly eroded traditional privacy boundaries, particularly within Indonesia’s rapidly growing e-commerce sector. The increasing volume and value of online transactions have intensified the collection and processing of consumer personal data, thereby amplifying legal and commercial risks at every stage of data processing. This study aims to analyze the forms of risks arising at each stage of personal data processing on e-commerce websites, as stipulated in Article 16 of Law No. 27 of 2022 on Personal Data Protection, while also identifying existing legal gaps in its implementation. This research adopts a normative juridical approach, employing library-based legal research focused on statutory and conceptual analysis. The findings demonstrate that distinct risks emerge across different stages of personal data processing, both prior to and following data storage by data controllers. Key risks include non-compliant data collection practices, lack of transparency, excessive and unlawful data collection, as well as unauthorized access, disclosure, modification, misuse, destruction, and loss of personal data. These risks are further exacerbated by ambiguities in regulatory provisions, particularly regarding consent standards, accountability mechanisms, and enforcement. This study contributes to the discourse in private and commercial law by offering a stage-based risk mapping of personal data processing within Indonesian e-commerce, highlighting specific regulatory shortcomings under the Personal Data Protection Law. It provides a nuanced understanding of how legal gaps translate into practical vulnerabilities for consumers. The research also proposes practical mitigation measures, including regular system updates and strengthening the capacity of human resources responsible for data processing, to enhance compliance and consumer data protection in Indonesia’s digital economy.</dc:description>
	<dc:publisher xml:lang="en">Universitas Negeri Semarang</dc:publisher>
	<dc:date>2024-11-30</dc:date>
	<dc:type>info:eu-repo/semantics/article</dc:type>
	<dc:type>info:eu-repo/semantics/publishedVersion</dc:type>
	<dc:type xml:lang="en">Peer-reviewed Article</dc:type>
	<dc:format>application/pdf</dc:format>
	<dc:identifier>https://journal.unnes.ac.id/journals/jpcl/article/view/20081</dc:identifier>
	<dc:identifier>10.15294/jpcl.v8i2.20081</dc:identifier>
	<dc:source xml:lang="en">Journal of Private and Commercial Law; Vol. 8 No. 2 (2024): November, 2024; 209-240</dc:source>
	<dc:source>2599-0306</dc:source>
	<dc:source>2599-0314</dc:source>
	<dc:language>eng</dc:language>
	<dc:relation>https://journal.unnes.ac.id/journals/jpcl/article/view/20081/3828</dc:relation>
	<dc:rights xml:lang="en">Copyright (c) 2024 Tegar Islami Putra, Adinda Zeranica Putri Fakhis, Anisa Tussaleha, Mahima Umaela Firdhausya,  Muhammad Hilmi Naufal Aflah, Souad Ahmed Ezzerouali, Mohamed Cheick Banane (Author)</dc:rights>
	<dc:rights xml:lang="en">https://creativecommons.org/licenses/by-nc/4.0</dc:rights>
</oai_dc:dc>