<![CDATA[The rapid development of digital payment systems based on the Quick Response Code Indonesian Standard (QRIS) has generated significant legal implications for consumer protection, particularly in addressing risks such as system failures, data breaches, and fraud, which indicate a gap between legal norms and their practical implementation. This study aims to analyze the forms of consumer legal protection in QRIS transactions under Bank Indonesia Regulations and Board of Governors Regulations, as well as to examine the legal liability of payment service providers and the challenges in its implementation. This research employs a normative juridical method using statutory and conceptual approaches, with qualitative and prescriptive analysis of primary and secondary legal materials. The findings reveal that consumer protection in QRIS transactions has been formulated through preventive and repressive mechanisms, including information transparency, system security standards, personal data protection, and complaint and dispute resolution mechanisms. The liability of payment service providers extends beyond contractual liability toward the application of strict liability and vicarious liability principles in ensuring transaction security. However, the implementation of such legal protection still faces several challenges, including regulatory disharmony, limited supervisory capacity, technological vulnerabilities, and low levels of digital literacy among consumers. These findings imply the necessity of strengthening the integration between legal norms and the practical operation of digital payment systems to establish a more adaptive and responsive consumer protection framework. AbstrakPerkembangan pesat sistem pembayaran digital berbasis Quick Response Code Indonesian Standard (QRIS) menimbulkan implikasi yuridis terhadap perlindungan konsumen, terutama dalam menghadapi risiko transaksi elektronik seperti kegagalan sistem, kebocoran data, dan fraud, yang menunjukkan adanya kesenjangan antara norma hukum dan praktik di lapangan. Penelitian ini bertujuan untuk menganalisis bentuk perlindungan hukum konsumen dalam transaksi QRIS berdasarkan Peraturan Bank Indonesia dan Peraturan Anggota Dewan Gubernur, serta mengkaji tanggung jawab hukum penyedia jasa pembayaran dan kendala implementasinya. Penelitian ini menggunakan metode yuridis normatif dengan pendekatan peraturan perundang-undangan dan pendekatan konseptual, dengan analisis kualitatif yang bersifat preskriptif terhadap bahan hukum primer dan sekunder. Hasil penelitian menunjukkan bahwa perlindungan hukum konsumen dalam transaksi QRIS telah dirumuskan melalui mekanisme preventif dan represif yang mencakup transparansi informasi, standar keamanan sistem, perlindungan data pribadi, serta mekanisme pengaduan dan penyelesaian sengketa. Tanggung jawab penyedia jasa pembayaran tidak hanya didasarkan pada hubungan kontraktual, tetapi juga berkembang ke arah penerapan prinsip tanggung jawab mutlak dan tanggung jawab pengganti dalam menjamin keamanan transaksi digital. Namun demikian, implementasi perlindungan hukum tersebut masih menghadapi berbagai kendala, antara lain disharmonisasi regulasi, keterbatasan pengawasan, kerentanan sistem teknologi, serta rendahnya literasi digital masyarakat. Temuan ini menunjukkan perlunya penguatan integrasi norma hukum dengan praktik penyelenggaraan sistem pembayaran digital guna mewujudkan perlindungan konsumen yang lebih adaptif dan responsif terhadap perkembangan teknologi.]]>
