Legal Protection of Personal Data in Combating Cybercrime in Indonesia

Rizal Abidin; Nur Kumala Dewi; Dwi Agung Santoso; Taufan Dwiyogo S; Nanang Sumargo; Cahya Citra Carolene; Triana Asih Wulandari; Muthi'ah Dwita Fathinah

Authors

Rizal Abidin Muhammadiyah University of Science and Technology, Jakarta
Nur Kumala Dewi Muhammadiyah University of Science and Technology, Jakarta
Dwi Agung Santoso Muhammadiyah University of Science and Technology, Jakarta
Taufan Dwiyogo S Muhammadiyah University of Science and Technology, Jakarta
Nanang Sumargo Muhammadiyah University of Science and Technology, Jakarta
Cahya Citra Carolene Muhammadiyah University of Science and Technology, Jakarta
Triana Asih Wulandari Muhammadiyah University of Science and Technology, Jakarta
Muthi'ah Dwita Fathinah Muhammadiyah University of Science and Technology, Jakarta

Keywords:

Personal Data Protection, Online Lending, Cybercrime, Legal Liability

Abstract

The development of online lending services as part of financial technology has transformed public access to financial services in Indonesia. This convenience has been accompanied by an increasing volume of personal data processing, which raises new concerns regarding information security and privacy protection. Various data breach incidents indicate that personal data protection is no longer limited to administrative issues but is closely related to cybercrime risks within the digital ecosystem. This study aims to analyze the legal liability of online lending providers for personal data violations and to evaluate the effectiveness of data protection regulations in addressing cybercrime. The research employs a normative juridical approach through the analysis of legislation, scholarly literature, and case studies involving the misuse of personal data in online lending services. The findings show that online lending providers, as personal data controllers, bear administrative, civil, and criminal liability in cases of negligence in safeguarding user data. The main challenges in personal data protection include weaknesses in regulatory supervision, complexities in digital evidence procedures, and the low level of public digital literacy.

References

Aini, N., & Lubis, F. (2024). Tantangan pembuktian dalam kasus kejahatan siber di Indonesia. Jurnal Hukum Teknologi Informasi, 6(1), 45–58.

Albrecht, J. P. (2022). Data protection and accountability in the digital economy. International Data Pri-vacy Law, 12(3), 189–201. https://doi.org/10.1093/idpl/ipac012

Anggraini, N. F., & Wiraguna, S. A. (2025). Tanggung jawab hukum platform pinjaman online terhadap penyalahgunaan data pribadi. Jurnal Hukum dan Pembangunan, 55(1), 112–128.

Borgesius, F. Z. (2021). Privacy protection in the age of digital platforms. Computer Law & Security Re-view, 41, 105–118. https://doi.org/10.1016/j.clsr.2021.105566

Hidayat, E. R., Prasetyo, A., & Kurniawan, D. (2025). Perlindungan hukum bagi korban pinjaman online ilegal di Indonesia. Jurnal Legislasi Indonesia, 22(1), 67–82.

Kshetri, N. (2023). Cybercrime and cybersecurity challenges in fintech ecosystems. Journal of Cyber Pol-icy, 8(2), 214–230. https://doi.org/10.1080/23738871.2023.2172456

Martin, K., & Shilton, K. (2022). Why experience matters to privacy: Context-based privacy expectations and regulation. Journal of Business Ethics, 175(3), 599–612. https://doi.org/10.1007/s10551-020-04636-4

Nisa, R., Rahmawati, L., & Putra, H. (2025). Literasi digital dan perlindungan data pribadi masyarakat Indonesia. Jurnal Komunikasi Digital, 9(1), 25–39.

Dewi, N. K. (2021). Review of vehicle surveillance using IoT in the smart transportation concept. Interna-tional Journal of Engineering and Manufacturing, 11(1), 1–10.

OECD. (2023). Enhancing access to and sharing of data: Reconciling risks and benefits for data reuse across societies. Paris: OECD Publishing.

Republik Indonesia. (2022). Undang-Undang Nomor 27 Tahun 2022 tentang Perlindungan Data Pribadi. Jakarta: Sekretariat Negara.

Republik Indonesia. (2024). Undang-Undang Nomor 1 Tahun 2024 tentang Perubahan atas Undang-Undang Informasi dan Transaksi Elektronik. Jakarta: Sekretariat Negara.

UNCTAD. (2024). Data protection and privacy legislation worldwide. Geneva: United Nations Confer-ence on Trade and Development.

World Bank. (2022). Digital financial services and consumer protection in emerging economies. Wash-ington, DC: World Bank Group.