Legal Protection Analysis of Personal Data Breaches in Shopee Paylater Consumer Loan Transactions
Abstract
The widespread use of personal information in pay-later-based loan applications services reflects the vulnerability of digital security systems implemented by technology companies in Indonesia. Recently, several Shopee users reported being victims of such cases, claiming they never activated the paylater feature, yet their bank loan applications were declined due to poor credit records linked to SPayLater usage. While services like Shopee's SPayLater offer convenience, they also increase the risks of default and data breaches. Incidents such as improper debt collection practices and unauthorized access to ShopeePay balance reveal flaws in the platform's data protection and security measures. This underscores the need for in-depth research to strengthen legal safeguards for consumer personal data in Shopee's digital transactions. Findings indicate that SPayLater, as the data controller, holds the responsibility to collect, process, and protect consumer information throughout its lifecycle. Nevertheless, Shopee is perceived to have fallen short in fulfilling this duty, resulting in consumers suffering losses from unauthorized use of their data for loan applications. This situation highlights the urgency for more robust legal protections—both internally and externally to guarantee the protection of users' personal information. This research uses a normative legal research type with a descriptive research type. The problem approach uses a statutory approach with a case approach.
Article Discovery & Scholarly Lookup
DOIAuthor Biographies
Business Law Study Program, Institut Informatika dan Bisnis Darmajaya, Bandar Lampung City, Lampung Province, Indonesia
Business Law Study Program, Institut Informatika dan Bisnis Darmajaya, Bandar Lampung City, Lampung Province, Indonesia
Business Law Study Program, Institut Informatika dan Bisnis Darmajaya, Bandar Lampung City, Lampung Province, Indonesia
How to Cite
License & Copyright
This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.
This is an open-access journal. All articles are distributed under the terms of the Creative Commons Attribution 4.0 International License (CC BY 4.0), which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.
Creative Commons Attribution 4.0 International (CC BY 4.0)Under this license, you are free to:
- Share: copy, distribute, and transmit the work in any medium or format.
- Adapt: remix, transform, and build upon the work for any purpose, even commercially.
You must give appropriate credit, provide a link to the license, and indicate if changes were made. You may do so in any reasonable manner, but not in any way that suggests the licensor endorses you or your use.
Copyright and Retention Copyright & Retention Authors retain copyright without restrictions and grant this journal the right of first publication under an open-access model. The journal retains non-exclusive publishing rights for archiving, indexing, and scholarly dissemination.References
Total: 16 References- Agus Sudibyo. (2019). Liberation and control. Gramedia Pustaka Utama.
- Ashofa, B. (2004). Legal research methods. PT Rineka Cipta.
- Benuf, C., Mahmudah, S., & Priyono, E. A. (2019). Legal Protection of Financial Technology Consumer Data Security in Indonesia. Legal Reflections: Journal of Legal Sciences, 3(2), 145-160.
- CNIL. (2021, July 30). Amazon fined €746M for GDPR violations. European Data Protection Board. https://edpb.europa.eu/news/national-news/2021/amazon-fined-eu746m-gdpr-violations_en
- European Parliament and Council. (2016). General Data Protection Regulation (EU) 2016/679. Official Journal of the European Union. https://eur-lex.europa.eu/eli/reg/2016/679/oj
Similar Articles
Explore related articles published in this journal.
Preventive Measures Against Non-Performing Loans: Implementation of Prudential Principles in the Buy Now Pay Later (BNPL) Scheme Through Bank–E-Commerce Partnerships
Personal Data Security Violations in East Jakarta Regional Elections: Legal Analysis Through Personal Data Protection Legislation
Peran Kuasa Hukum dalam Penyelesaian Sengketa Kepabeanan dan Cukai pada Pengadilan Pajak (Studi Kasus Putusan Nomor 1430/B/PK/Pjk/2026)
Legal Analysis of Marriage Dispensation Requests for Minors in Cases of Premarital Pregnancy (Case Study: Decision No. 82/PDT.P/2024/PA.PROB)
Penegakan Hukum terhadap Tindak Pidana Judi Online oleh Ditreskrimsus Polda Jawa Timur (Studi Kasus Putusan Nomor 475/Pid.B/2026/PN Sby)
Most read articles by the same author(s)
Explore other articles by these authors.