<![CDATA[Personal data security is an integral part of the right to privacy that must be protected, particularly with the increasing use of personal data in digital transactions and services. The research problems addressed in this study are how consumer personal data protection is legally regulated in the digital era and what forms of legal protection are available to consumers, including the legal gaps that remain in their implementation. This study aims to analyze the legal framework and forms of legal protection for consumers’ personal data in the digital era. This research employs a normative juridical method with a statutory approach through a literature study of primary and secondary legal materials. The results show that consumer personal data protection in Indonesia is regulated by Law Number 27 of 2022 on Personal Data Protection, Law Number 8 of 1999 on Consumer Protection, the Law on Electronic Information and Transactions, and various sectoral regulations. However, these regulations have not been fully integrated because the Consumer Protection Law does not explicitly recognize personal data protection as part of consumer rights. Legal protection consists of preventive measures through consent, transparency, system security, and business actors’ responsibility; repressive measures through supervision and sanctions; and remedial measures through restoration of rights, compensation, and dispute resolution. Therefore, harmonization between the personal data protection and consumer protection regimes, stronger supervision, and clearer responsibility of business actors are necessary to ensure effective protection of consumers’ personal data in the development of digital services.]]>
