Tinjauan Yuridis Undang-Undang Perlindungan Data Pribadi Tahun 2022 dalam Menangani Kebocoran Data Pelanggan E-Commerce

Lingga Syailendra Arief; Ruli Purwanto

doi:10.62383/pk.v2i3.1019

Authors

Lingga Syailendra Arief Universitas Cokroaminoto Yogyaakarta
Ruli Purwanto Universitas Cokroaminoto Yogyaakarta

DOI:

https://doi.org/10.62383/pk.v2i3.1019

Keywords:

Consumer Privacy, Cybersecurity, Data Breaches, E-Commerce, Personal Data Protection Law

Abstract

In the rapidly evolving digital era, data breaches have emerged as a serious threat, particularly in the e-commerce sector which handles vast amounts of customers’ personal data. The protection of personal data has therefore become a crucial issue, requiring effective regulation to ensure digital privacy. In response to this growing concern, Indonesia enacted the Personal Data Protection Law (UU PDP) in 2022 as a significant step toward strengthening digital privacy and security. This study aims to evaluate the effectiveness of the 2022 PDP Law in addressing customer data breach incidents on e-commerce platforms in Indonesia. Using a qualitative approach and case study method, this research analyzes several high-profile data breach cases involving major e-commerce companies in the country. The findings indicate that, although the PDP Law has established a clear legal framework regarding the obligations of reporting and managing data breaches, its implementation still faces multiple challenges. Some companies have not fully complied with the legal timeframes for notifying users, and there is a general lack of transparency in how data breach incidents are managed. These shortcomings reveal a gap between the regulatory framework and practical enforcement in the field. Furthermore, the study highlights the limited public awareness and the insufficient preparedness of some companies in responding to data security incidents in accordance with the law. As a result, the rights of consumers to be informed and protected are not always upheld effectively. This research recommends stronger supervision by relevant authorities to ensure stricter enforcement of the PDP Law. It also underscores the need for ongoing education and intensive training for e-commerce companies to enhance their capacity to prevent, detect, and respond to data breaches in compliance with the legal standards. By reinforcing regulatory implementation and organizational readiness, Indonesia can better safeguard digital consumer rights in the growing e-commerce landscape.

Downloads

Download data is not yet available.

References

Abdul, Halim Barkatullah, & Prasetyo, T. (2005). Bisnis E-Commerce. Yogyakarta: Pustaka Pelajar.

Badrawani, W., Wardhono, R. D. T. K., & Deviana, A. (2024). Pelindungan data pribadi di Bank Indonesia dan lembaga jasa keuangan: Rekomendasi kebijakan dan teknis pengaturan. Bank Indonesia Working Paper.

Baldwin, R., & Cave, M. (2011). Understanding regulation: Theory, strategy, and practice (2nd ed.). Oxford University Press.

Cholid Narbuko, & Achmadi, A. (2010). Metode Penelitian.

Fahri, S. M. Al. (2023). Kebijakan privasi terhadap data pribadi pengguna e-commerce ditinjau dari UU No. 27 Tahun 2022 tentang Perlindungan Data Pribadi.

Gulton, E. (n.d.). Cyber Law: Suatu pengantar perlindungan konsumen dalam transaksi perdagangan melalui electronic commerce. Bandung: Elips.

Halim, E. F. (2022). Perlindungan hukum data pribadi pembeli di perdagangan secara elektronik (e-commerce) di Indonesia. Jurnal Hukum Visio Justisia.

Indriani, M., & Putri, A. A. (2023). The dynamic consent for optimizing personal data protection and the right to privacy. CORE.ac.uk.

Isnaeni, M. (2018). Seberkas diaroma hukum kontrak. Surabaya: PT Revka Petra Media.

Kansil, C. S. T. (1989). Pengantar ilmu hukum dan tata hukum Indonesia. Jakarta: Balai Pustaka.

Kusuma, P. R. A., & Adistiya, K. N. (2024). Kebocoran data pribadi berdasarkan Pasal 16 Ayat 2 Huruf E UU No. 27 Tahun 2022. Jurnal Ilmu Hukum.

Lase, S. P. O. (2025). Urgensi pembentukan lembaga pengawas dalam pembaharuan hukum perlindungan data pribadi. Locus Journal of Academic Literature Review.

Marischa, D., & Setianingrum, R. B. (2024). Transfer of personal data by e-commerce companies: A study from the perspective of Indonesian personal data protection laws. Jurnal Mahasiswa Hukum Indonesia.

Muchsin. (2003). Perlindungan dan kepastian hukum bagi investor di Indonesia. Surakarta: Magister Ilmu Hukum Program Pascasarjana Universitas Sebelas Maret.

Perwira, I. (2006). Efektivitas hukum dalam perspektif hukum dan masyarakat. Jakarta: Ghalia Indonesia.

Pontorondo, I., Walangitan, M. A., & Kapojos, R. L. (2025). Perlindungan hukum terhadap data privasi konsumen e-commerce yang menjadi korban kejahatan siber. Citizen Journal, 1, 8.

Saputra, A. F. R., Shafwa, A. J., & Umam, R. (2025). Analisis efektivitas penerapan Undang-Undang Perlindungan Konsumen (UUPK) dalam transaksi e-commerce di Indonesia. Media Riset Bisnis dan Ekonomi.

Saqinah, D. A. (2025). Implikasi hukum penggunaan artificial intelligence (AI) dalam transaksi e-commerce di Indonesia. Jurnal Ilmiah Universitas Mataram.

Shidarta. (2006). Hukum perlindungan konsumen Indonesia (Cetakan ke-3). Jakarta: PT Grasindo.

Simanjuntak, M., & Muflikhati, I. (2023). Willingness to share data pribadi dan kaitannya dengan penyalahgunaan data konsumen e-commerce di Indonesia. Jurnal Ilmu Keluarga dan Konsumen.

Soekanto, S. (2021). Faktor-faktor yang mempengaruhi penegakan hukum. Jakarta: Rajawali Pers.

Undang-Undang Nomor 27 Tahun 2022 tentang Perlindungan Data Pribadi.

Wijaya, G. (2020). Pelindungan data pribadi di Indonesia: Ius constitutum dan ius constituendum. Law Review, Universitas Pelita Harapan.

Wiraguna, S. A., & Wulandari, D. (2025). Perlindungan hukum bagi pengguna aplikasi Tokopedia dari kebocoran data pribadi. Jurnal Kajian Hukum dan Kebijakan Publik.