The development of online loan services in Indonesia provides easy access to financing, but it also creates legal issues regarding the protection of customers personal data, particularly during the collection process. The disproportionate use of personal data, the dissemination of information to third parties, and collection actions containing threats can harm customers privacy and security rights. This study aims to analyze the legal regulation of customers personal data protection in online loan activities in Indonesia, the forms of legal protection for personal data in the collection process, and the legal liability of operators for the misuse of customers personal data. The study employs a normative legal method with statutory and conceptual approaches. Legal materials were analyzed qualitatively by connecting applicable legal provisions with the results of previous studies published over the last five years. The results indicate that the protection of customers personal data has been strengthened through Law Number 27 of 2022 on Personal Data Protection and financial services sector regulations. Collection must be conducted lawfully, proportionally, transparently, and with respect for the customer's right to privacy. The misuse of personal data can incur legal liability for the violating parties.
Copyrights © 2025