Liability of E-Commerce Service Providers for Processing Consumer Personal Data (Comparative Study of Indonesia & Europe)
DOI:
https://doi.org/10.15294/jpcl.v9i1.9370Keywords:
Liability, E-Commerce, Consumer, Personal Data, Indonesia, EuropeAbstract
This study examines the regulatory mandate governing the liability of E-Commerce service providers in protecting personal data in personal data processing according to Law Number 27 of 2022 and General Data Protection Regulation. To support the fulfillment of the rights of consumers as owners of personal data and E-Commerce service providers as controllers of personal data, it is necessary to study the regulation of the liability of E-Commerce service providers in protecting personal data in personal data processing in other countries that first have personal data protection arrangements. The research method used to achieve the research objectives and targets is normative legal research with a legislative and comparative approach. The type of research used in this research is normative juridical research that gathers primary data through the analysis of relevant legal regulations and also includes the use of supporting scholarly journals. E-Commerce Service Providers as Personal Data Managers Against Consumer Personal Data Processing in Europe, in principle, have the same form of personal data processing as Indonesia, namely processing of personal financial data, full name, gender, nationality, user location, and personal data combined to identify a person in the form of telephone numbers and IP Addresses. However, European countries have different types of personal data from the rules in Indonesia.
References
Anjawai, Namrysilia Buti, F. Yudhi Priyo Amboro, and Rufinus Hotmaulana Hutauruk. “Perbandingan Perlindungan Hukum Terkait Data Pribadi Di Indonesia Dan Jerman.” AL-MANHAJ: Jurnal Hukum Dan Pranata Sosial Islam 4, no. 2 (2022): 207–18. https://doi.org/10.37680/almanhaj.v4i2.1791.
Annur, Cindy Mutia. “Indonesia Masuk 3 Besar Negara Dengan Kasus Kebocoran Data Terbanyak Dunia.” Katadata.co.id, 2022. https://databoks.katadata.co.id/datapublish/2022/09/13/indonesia-masuk-3-besar-negara-dengan-kasus-kebocoran-data-terbanyak-dunia.
Arifin, S. “Implementasi Monitoring Jaringan Menggunakan Raspberry Pi Dengan Memanfaatkan Protokol SMTP (Simple Mail Transfer Protocol).” JATI: Jurnal Mahasiswa Teknik Informatika 1, no. 1 (2017): 37–44.
Badrulzaman, Mariam Darus, Sutan Remy Sjahdeini, Heru Soepraptomo, Faturrahman Djamil, and Taryana Soenandar. Kompilasi Hukum Perikatan. Jakrata: Citra Aditya Bakti, 2001.
Bitrián, Paula, et al. "Gamification in workforce training: Improving employees’ self-efficacy and information security and data protection behaviours." Journal of Business Research 179 (2024): 114685.
Borgesius, Frederik Zuiderveen, Jonathan Gray, and Mireille van Eechoud. “Open Data, Privacy, and Fair Information Principles: Towards a Balancing Framework.” Berkeley Technology Law Journal 30, no. 3 (2015): 2073–2131. https://www.jstor.org/stable/26377585.
Crawford, Allison D., et al. "A reproductive justice investigation of utilizing digital interventions among underserved populations with criminal legal system supervision: Policy brief." Nursing Outlook 73.2 (2025): 102349.
Elnizar, Normand Edwin. “Ini 4 Perbedaan GDPR Dan Perlindungan Data Pribadi Di Indonesia.” hukumonline.com, 2019. https://www.hukumonline.com/berita/a/ini-4-perbedaan-gdpr-dan-perlindungan-data-pribadi-di-indonesia-lt5d513741ccedd/#.
Endriani, Santi. “Konsep Uang: Ekonomi Islam VS Ekonomi Konvensional.” Anterior Jurnal 15, no. 1 (2015): 70–75. https://doi.org/10.33084/anterior.v15i1.201.
Fibrianti, N., Dahlan, T. A., Anitasari, R. F., Paramita, N. D., & Putra, T. I. "Review of Child Consumer Protection in the Practice of Online Gambling Games Through the Gacha System." The Indonesian Journal of International Clinical Legal Education 6, no.3 (2024) 427-452 https://doi.org/doi.org/10.15294/ijicle.v6i3.13198
Finaka, Andrean W. “Perjalanan UU Perlindungan Data Pribadi.” Indonesiabaik.id, 2016. https://indonesiabaik.id/infografis/perjalanan-uu-perlindungan-data-pribadi.
Firdhausya, Mahima Umaela, Muhammad Hilmi Naufal Aflah, Anisa Tussaleha, Tegar Islami Putra, and Eko Mukminto. “The Urgency of Limiting The Utilization of Consumer IP Addresses By Companies as Personal Data Objects in The Study of Positive Law in Indonesia.” Law Research Review Quarterly 10, no. 2 (2024): 393-410.
Frankenfield, Ake. “What Is Personally Identifiable Information (PII)? Types and Examples.” Investopedia.com, 2024. https://www.investopedia.com/terms/p/personally-identifiable-information-pii.asp.
Guamán, Danny S., David Rodriguez, Jose M. del Alamo, and Jose Such. “Automated GDPR Compliance Assessment for Cross-Border Personal Data Transfers in Android Applications.” Computers and Security 130, no. C (2023): 1–16. https://doi.org/10.1016/j.cose.2023.103262.
Haddara, Moutaz, A. Salazar, and Marius Langseth. “Exploring the Impact of GDPR on Big Data Analytics Operations in the E-Commerce Industry.” Procedia Computer Science 219, no. 2022 (2023): 767–77. https://doi.org/10.1016/j.procs.2023.01.350.
Hakim, Guswan, Oheo Kaimuddin Haris, and Muthaharry Mohammad. “Analisis Perbandingan Hukum Mengenai Regulasi Perlindungan Data Pribadi Antara Uni Eropa Dan Indonesia Comparative Analysis of Laws Concerning Personal Data Protection Regulations Between the European Union and Indonesia.” Halu Oleo Legal Research | 5, no. 2 (2023): 443–53. https://ojs.uajy.ac.id/index.php/jik/article/view/682.
Hamid, Supardi, and Mohammad Nurul Huda. "Mapping the landscape of government data breaches: A bibliometric analysis of literature from 2006 to 2023." Social Sciences & Humanities Open 11 (2025): 101234.
Hasnul, Arifin. Kitab Suci Jaringan Komputer Dan Koneksi Internet. Yogyakarta: Mediakom, 2011.
Irwansyah. Penelitian Hukum: Pilihan Metode & Praktik Penulisan Artikel. Yogyakarta: Mirra Buana Media, 2020.
Joyce, Aaron, and Vahid Javidroozi. "Smart city development: Data sharing vs. data protection legislations." Cities 148 (2024): 104859.
Kang, Jerry. “Information Privacy in Cyberspace Transaction.” Stanford Law Review 50, no. 4 (1998): 5.
Kathole, Atul B., Amit Sanjiv Mirge, and Avinash P. Jadhao. "Advancing electronic medical data protection through blockchain innovation." Blockchain and Digital Twin for Smart Hospitals. Elsevier, 2025. 193-205.
Kun, Eyup. "Searching for the appropriate legal basis for personal data processing for cybersecurity purposes under the NIS 2 Directive: Legal obligation and/or legitimate interest?." Computer Law & Security Review 56 (2025): 106098.
Laurent, Maryline, and Claire Levallois-Barth. “Privacy Management and Protection of Personal Data.” In Digital Identity Management, 137–205. Elsevier, 2015. https://doi.org/10.1016/B978-1-78548-004-1.50004-3.
Lim, Abigail Chiu Mei, Lynnette Hui Xian Ng, and Araz Taeihagh. "Biometric data landscape in Southeast Asia: Challenges and opportunities for effective regulation." Computer Law & Security Review 56 (2025): 106095.
Medina, Ayman Falak. “Indonesia’s Personal Data Protection Law: Key Compliance Requirements.” Aseanbriefing.com, 2022. https://www.aseanbriefing.com/news/indonesia-enacts-first-personal-data-protection-law-key-compliance-requirements/.
Muh.Ikram, Idrus, and Nur Miftahul Janah. “Peranan Pasar Tradisional Dalam Meningkatkan Kesejahteraan Masyarakat (Studi Kasus Pada Pasar Pa’baeng-Baeng Di Kecamatan Tamalate Kota Makasar).” Jurnal Ekonomi Balance Fakultas Ekonomi Dan Bisnis 12, no. 2 (2016): 2.
Muhammad, Maldi Omar, and Lucky Dafira Nugroho. “Perlindungan Hukum Terhadap Pengguna Aplikasi E-Commerce Yang Terdampak Kebocoran Data Pribadi.” Pamator Journal 14, no. 2 (2021): 165–74. https://doi.org/10.21107/pamator.v14i2.12472.
Muin, Indriani. “Perlindungan Data Pribadi Dalam Platform E-Commerce Guna Peningkatan Pembangunan Ekonomi Digital Indonesia.” MJP Journal Law and Justice (MJPJLJ) 1, no. 2 (2023): 81–91. https://jurnalilmiah.co.id/index.php/MJPJLJ.
Novelli, Claudio, et al. "Generative AI in EU law: Liability, privacy, intellectual property, and cybersecurity." Computer Law & Security Review 55 (2024): 106066.
Pahlevi, Reza. “Nilai Transaksi E-Commerce Indonesia Diperkirakan Capai US$137,5 Miliar Pada 2025.” Databoks.katadata.co.id, 2022. https://databoks.katadata.co.id/datapublish/2022/03/18/nilai-transaksi-e-commerce-indonesia-diperkirakan-capai-us1375-miliar-pada-2025.
Panggabean, Embun Febryanti, Hesty Ananta Yunas, Taufiqurrahman, and Nurbaiti. “Perkembangan Teknologi E-Business Terhadap Globalisasi Modern Pada Saat Ini.” Jurnal Manajemen Dan Ekonomi Kreatif 2, no. 1 (2024): 132–39. https://ukitoraja.id/index.php/jumek/article/view/284.
Profumo, L. P. G. “The Drivers of the Intention to Cruise during the Covid-19 Pandemic: The Role of the Willingness to Share Personal Information.” Sinergie: Italian Journal of Managemen 40, no. 1 (2022): 103–122.
Publication Team. “4 Kasus Kebocoran Data Di Semester I 2023, Mayoritas Dibantah.” CNNIndonesia.com, 2023. https://www.cnnindonesia.com/teknologi/20230720060802-192-975421/4-kasus-kebocoran-data-di-semester-i-2023-mayoritas-dibantah.
Putra, Tegar Islami. "Analisis Yuridis Profesionalitas Pejabat Pelindungan Data Pribadi Dalam Melaksanakan Tugas Sesuai Undang-Undang Nomor 27 Tahun 2022". Semarang State University. 2025.
___. “Data Protection Impact Assessment Indicators in Protecting Consumer E-Commerce Platforms.” The Indonesian Journal of International Clinical Legal Education 6, no. 1 (2024): 1–22.
———. “Juridical Analysis of The Application of Local Currency Settlement Between Indonesia and China in Business Transactions.” Journal of Private and Commercial Law 7, no. 2 (2023): 13–34.
Putra, Tegar Islami, and Nurul Fibrianti. “Criminalization of Consumers for Criticism Given to Companies Through Cyberspace in Theoritical Studies.” Annual Review of Legal Studies 1, no. 2 (2024): 179–204.
_ _ _. (2024). "Threats and Legal Protection of Personal Data Combined in E-Commerce Transactions Based on Personal Data Protection Law in Indonesia." Lambung Mangkurat Law Journal 9, no. 1 (2024): 64–74. https://doi.org/10.32801/lamlaj.v9i1.438
Putra, T. I., Fibrianti, N., & Fakhrullah, M. R. (2025). Basis of Data Protection Officer Appointment : Comparative Study of Indonesia and European Union Regulation. SASI, 31(1), 1–15. https://doi.org/10.47268/sasi.v31i1.2068.
Putra, T. I., Fibrianti, N., Fakhis, A. Z. P., & Fakhrullah, M. R. "Critically Reveal The Dimensions of Damage From Unauthorized Use of Personal Data." The Digest: Journal of Jurisprudence and Legisprudence 5, no.2 (2025) 231-262. https://doi.org/doi.org/10.15294/digest.v5i2.19941
Putra, Tegar Islami, Akbar Jihadul Islam, and Abdullah Mufti Abdul Rahman. “Integrating Islamic Laws into Indonesian Data Protection Laws: An Analysis of Regulatory Landscape and Ethical Considerations.” Contemporary Issues on Interfaith Law & Society 4, no. 1 (2024): 85–118.
Ramli, Ahmad M. Cyber Law Dan HAKI Dalam Sistem Hukum Indonesia. Jakarta: Refika Aditama, 2004.
Rawamangun Muka, Jl, Pulo Gadung, Kota Jakarta Timur, and Daerah Khusus. “Ethical Problems of Digitalization and Artificial Intelligence in Education: A Global Perspective.” Journal of Pharmaceutical Negative Results 14, no. 2 (2023): 2150–61. https://doi.org/10.47750/pnr.2023.14.S02.254.
Robles, Tomás, Borja Bordel, Ramón Alcarria, and Diego Sánchez-de-Rivera. “Enabling Trustworthy Personal Data Protection in EHealth and Well-Being Services through Privacy-by-Design.” International Journal of Distributed Sensor Networks 16, no. 5 (2020): 1-12. https://doi.org/10.1177/1550147720912110.
Srivastava, Saloni, and Shobhna Jeet. “E-Commerce and Privacy Issues.” Russian Law Journal XI, no. 5 (2023): 2170–75.
Telaumbanua, Taufik Hidayat, Deasy Soeikromo, and Delasnova S. S. Lumintang. “Perlindungan Hukum Bagi Pengguna Media Sosial Terhadap Penyalahgunaan Data Pribadi Terkait Hak Privasi Menurut Hukum Positif.” Jurnal Fakultas Hukum Unsrat Lex Privatum 13, no. 1 (2024): 5.
Waspiah, Waspiah, Noveria Sekar S, Ammirah Lies S, Tegar Islami Putra, Setyaning Wida N, and Salisa Widyaning K. “Model Pelindungan Hukum Data Pribadi Di Era Digital Guna Menjamin Hak Warga Negara Atas Pelindungan Data Pribadi.” Syntax Literate ; Jurnal Ilmiah Indonesia 8, no. 9 (2023): 5165–79. https://doi.org/10.36418/syntax-literate.v8i9.13662.
Winarno, Edi, and Ali Zaki. Web Programming Dengan Visual Basic. Jakarta: PT. Elex Media Komputindo, 2010.
Xu, Shuo, et al. "FLPM: A property modification scheme for data protection in federated learning." Future Generation Computer Systems 154 (2024): 151-159.
Yadi, Didik Kusuma, Muhammad Sood, and Dwi Martini. “Perlindungan Hukum Bagi Para Pihak Dalam Transaksi E-Commerce Menurut Tata Hukum Indonesia.” Jurnal Commerce Law 2, no. 1 (2022). https://doi.org/10.29303/commercelaw.v2i1.1368.
Downloads
Published
Article ID
9370Issue
Section
License
Copyright (c) 2025 Tegar Islami Putra, Nurul Fibrianti, Rizky Andeza Prasetya (Author)
This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License.
The Journal of Private and Commercial Law adheres to the principles of the Directory of Open Access Journals (DOAJ) by providing immediate, free, and open access to all published content. All articles are published under the Creative Commons Attribution-NonCommercial 4.0 International License (CC BY-NC 4.0). Under this license, users are permitted to read, download, copy, distribute, and adapt the published works in any medium or format, provided that appropriate credit is given to the original author(s) and source, a link to the license is included, and any changes made are clearly indicated. The use of the material is strictly limited to non-commercial purposes only.
Authors retain copyright of their work without any restriction. The journal does not transfer copyright from authors; instead, authors grant the journal the right of first publication while maintaining full ownership of their intellectual property. This ensures that authors preserve their rights while enabling wide dissemination and accessibility of their research in accordance with open access principles and DOAJ standards.
