The transformation of digital payments through the Quick Response Code Indonesian Standard (QRIS) has changed the structure of Indonesia's financial transactions, but the expansion of its use has also resulted in new challenges related to consumer protection, security, data governance, and equality of access. This study aims to analyze the adequacy of the QRIS regulatory framework in supporting an inclusive digital financial system and identify the regulatory gap between innovation expansion and legal protection. The research uses normative legal methods with legislative, conceptual, and analytical approaches. Legal materials are analyzed descriptively-analytically and prescriptively to evaluate the coherence and regulatory effectiveness of digital payment systems. Research shows that QRIS has evolved from a standardization instrument to a strategic digital financial infrastructure. Although the regulatory framework is becoming more comprehensive, there are still challenges in ensuring consumer protection, operator accountability, data security, and substantive access for unbanked and underserved groups. Digital inclusion is not enough to be measured through adoption growth, but must be accompanied by effective legal protection. QRIS regulations need to be directed at proportional innovation governance based on interoperability, consumer protection, data security, substantive access, and accountability to realize equitable and sustainable digital financial inclusion.
Copyrights © 2026