<![CDATA[The development of information technology-based online lending services has facilitated public access to financing. However, this convenience also poses risks of personal data misuse that may harm service users. This study aims to analyze the forms of personal data misuse in online lending services, the legal protection available to victims, and the factors contributing to personal data violations. This study employs a normative legal research method with a statutory approach, using qualitative analysis of primary and secondary legal materials collected through a literature review. The findings indicate that personal data misuse in online lending services may involve improper debt collection practices targeting emergency contacts or other third parties, unauthorized disclosure of personal data, and excessive access to borrowers' devices. From a normative legal perspective, personal data protection is regulated under Law Number 27 of 2022 concerning Personal Data Protection, Law Number 1 of 2024 concerning Electronic Information and Transactions, and Financial Services Authority regulations governing lending services and consumer protection. Violations of these provisions may result in administrative, civil, or criminal liability, depending on the nature and legal elements of the violations. The study also identifies low levels of digital literacy, limited awareness of personal data protection, the prevalence of illegal online lending platforms, and inadequate regulatory oversight as factors that may increase the risk of personal data violations. This study emphasizes that existing legal regulations must be supported by effective regulatory supervision, strengthened accountability of lending service providers, and improved digital literacy to ensure legal protection and certainty for users of online lending services.]]>
