The growing public interest in online investment has led to a surge in the use of personal data within electronic systems. This situation creates an urgent need for stronger protection of user’s personal data. The main issue addressed in this study concerns the legal protection of consumer’s personal data in online investment applications, with reference to the Personal Data Protection Law No. 27 of 2022, as well as the legal consequences that may arise if application providers misuse such data. The purpose of this research is to understand the existing forms of legal protection available to consumers and to identify potential sanctions that may be imposed on application providers if they are found to have committed violations. The research employs a normative juridical method with a statutory approach. It is descriptive-analytical in nature, with data collected from primary, secondary, and tertiary legal materials. The data were analyzed qualitatively. This study will also discuss the implementation of personal data protection in several online applications. In conclusion, one form of implementing personal data protection is reflected in the privacy policy, which provides information on how personal data is managed and must be approved by the data owner. A proper privacy policy is one that complies with the provisions set forth in the law.
Copyrights © 2026