The rapid development of information technology has had a significant impact on the way the public does business, especially in the area of electronic activities. However, this convenience also raises various legal issues, one of which is the misuse of personal data. The Law No. 27 Year 2022 on the Protection of Personal Data is the basis of this research to investigate the misuse of personal data in electronic transactions. The normative legal method with a law-based approach and conceptual thinking in this research. The results show that the Personal Data Protection Law (PDP) provides a clear legal framework in regulating the collection, storage and processing of personal data. In addition, the law provides for administrative sanctions and criminal penalties for those who violate its provisions as data controllers and processors. However, implementation on the ground still faces several obstacles, such as lack of public awareness, weak supervision and lack of readiness of the legal infrastructure. Therefore, synergistic efforts between the government, business actors and the community are needed to create an effective and equitable personal data protection ecosystem.
Copyrights © 2025