Personal Data Protection on Kredivo Application Based on the Principles of Lawfulness, Fairness and Transparency

Several cases of personal data leaks of fintechKredivo application users indicate data leaks and violations ofpersonal data protection. Indonesia regulates personal dataprotection in the financial sector in Law Number 27 of 2022 andFinancial Services Authority Regulation Number10/POJK.05/2022. This study aims to understand protectionagainst personal data leaks based on the principles of validity,fairness, and openness, as well as the principle of presumptionof responsibility. As a law study, this research using doctrinalanalysis and most of the main data are from laws andregulations. The results of this study indicate that theimplementation of the lawfulness, fairness and transparencyprinciples related to data protection has not been fullyimplemented. According to regulations, responsibility for thefailure of personal data protection should be lies with thefinancial services company, including actions taken by thirdparties who collaborate with the financial services company.Consumers must be compensated for losses due to negligence offintech service providers.