The Konstruksi Pertanggungjawaban Hukum Platform E-Commerce terhadap Pelanggaran Data Pribadi Konsumen dalam Perspektif Hukum Perlindungan Konsumen di Indonesia

Alwi Attamimi (Univeristas Wijaya Kusuma Surabaya)
Hanung Widjangkoro (Univeristas Wijaya Kusuma Surabaya)

Al-Zayn: Jurnal Ilmu Sosial & Hukum
Vol 4 No 4 (2026): 2026

The growth of the digital economy has driven increased use of digital platforms within the e-commerce ecosystem, which relies on the large-scale processing of consumers’ personal data. This situation gives rise to various risks of personal data breaches that impact consumers’ rights to privacy, security, and legal protection. The enactment of Law No. 27 of 2022 on Personal Data Protection serves as a crucial foundation for regulating personal data protection in Indonesia; however, the legal framework regarding the liability of digital platforms for violations of consumers’ personal data still leaves various normative and implementation-related issues unresolved. This study aims to analyze the legal status of digital platforms as Electronic System Operators and Personal Data Controllers, examine the forms of legal liability that can be imposed for violations of consumer personal data, and formulate a reconstruction of legal liability based on consumer protection and digital justice. The study employs a normative legal method using a statutory approach, a conceptual approach, and a case-based approach. Legal materials were collected through a literature review of relevant laws and regulations, court decisions, legal doctrines, legal textbooks, and scholarly articles. The research findings indicate that digital platforms hold a dual legal status as Electronic System Operators and Personal Data Controllers, which gives rise to administrative, civil, and criminal liabilities. The current liability system does not yet fully provide effective protection for consumers due to the continued dominance of the fault-based liability approach and the heavy burden of proof. This study offers an innovative solution in the form of a Consumer Data Protection Liability Model that integrates the principles of strict liability, reversal of the burden of proof, mandatory compensation for victims, and institutional strengthening of oversight as an effort to achieve legal certainty, consumer protection, and digital justice within Indonesia’s digital economy ecosystem.