Platform Liability as a Personal Data Controller for The Processing of Emergency Contact Data in Fintech Lending Agreements (A Study on The Kredit Pintar Platform)
DOI:
https://doi.org/10.59525/rechtsvinding.1856Keywords:
Fintech Lending; Emergency Contact; Personal Data Protection; Personal Data Controller; Platform Liability.Abstract
The development of financial technology lending (fintech lending) drives service providers to collect and process users' personal data, including the personal data of emergency contacts as part of loan application requirements. In practice, the processing of emergency contact personal data is conducted based on standard clauses that require users to state that they have obtained consent from the party registered as an emergency contact and transfer certain liabilities to the user. This condition raises issues regarding the validity of personal data processing and the platform's liability as a Personal Data Controller under Law Number 27 of 2022 concerning Personal Data Protection. This research aims to analyze the validity of the processing of emergency contact personal data in the fintech lending agreement of the Kredit Pintar Platform based on Law Number 27 of 2022 concerning Personal Data Protection and to analyze the platform's liability as a Personal Data Controller for the processing of emergency contact personal data. This research utilizes a normative legal research method with a statute approach, a conceptual approach, and a contract study approach. Legal materials were obtained through a literature study and analyzed qualitatively using a prescriptive method. The results of the research indicate that the validity of processing emergency contact personal data is insufficient if it is merely based on the user's statement of having obtained consent from the emergency contact, but must satisfy a lawful basis for processing as well as the principles of personal data protection as regulated in the Personal Data Protection Law. Furthermore, the platform as a Personal Data Controller retains legal liability for the processing of emergency contact personal data; thus, clauses transferring liability to the user do not eliminate the platform's legal obligations to protect the rights of the Personal Data Subject.
References
Aprillia Mieke U. (2025). Membongkar Masalah Gagal Bayar Pinjaman online, Tinjauan Praktis Hukum Perdata. Banjarnegara: PT Penerbit Qriset Indonesia.
Dadan Kurniawan. (2026). Cara Gagal Bayar Hutang Pinjol: Panduan Praktis Mengahdapi Gagal Bayar, Perlindungan Data Pribadi dan Strategi Pemulihan Nama Baik Sesuai Aturan OJK. Karawang: Afdan Rojabi Publisher.
Daffa Arya Prayoga, Jadmiko Anom Husodo, & Andiana Elok Puri Maharani. (2023). Perlindungan Hukum Terhadap Hak Warga Negara Dengan Berlakunya Undang-Undang Nomor 23 Tahun 2019 Tentang Pengelolaan Sumber Daya Nasional. Jurnal Demokrasi Dan Ketahanan Nasional, 2(2), 191.
Doni Harianto, Adithia Permana Sinaga, & Fajriansyah. (2025). Analisis Yuridis Perlindungan Hukum Terhadap Penyalahgunaan Data Pribadi Kontak Darurat Sepihak di Platform Pinjaman Online Legal (Studi Kasus Platform Ada Modal). Jurnal Hukum Ius Publicum, 6(1), 222.
Dr. H. Sukawi Sutarip. (2024). Rekonstruksi Pengaturan Eksekusi Hak Tanggungan di Indonesia Berlandaskan Asas Keadilan. Semarang: CV Lawwana.
Fajar Nugroho Handayani. (2020). Penggunaan Klausula Baku Yang Dilarang Menurut Hukum Perlindungan Konsumen. Ponorogo: Uwais Inspirasi Indonesia.
Gita Theresa. (2024). Perlindungan Hukum Terkait Data Pribadi Dalam Penyelenggaraan Fintech P2P Lending di Indonesia. Jurnal Darma Agung, 32(3), 357.
Hadjon, P. M. (1987). Perlindungan hukum bagi rakyat di Indonesia: sebuah studi tentang prinsip-prinsipnya, penanganannya oleh pengadilan dalam lingkungan peradilan umum dan pembentukan peradilan administrasi negara. Bina Ilmu.
Jebaru, R. A., & Widiatno, M. W. (2026). Perlindungan Hukum Bagi Prosesor Data Pribadi Dalam Melaksanakan Pemrosesan Data Pribadi Menggunakan Aplikasi Sistem Informasi Kependudukan. Pengabdian Masyarakat Dan Riset Pendidikan, 4(3), 19570.
Jonathan Matthew. (2024). Kesadaran Urgensi Peran Pengendali dan Prosesor data Pribadi dalam Rangka Perlindngan Data Pribadi Individu Berdasarkan Undang-Undang Nomor 27 Tahun 2022 Tentang Perlindungan Data Pribadi. Jurnal Hukum Tora, 10(1), 126.
Kinanti, W., Ramadhani, S., & Wiraguna, S. A. (2025). Implementasi Pelindungan Data Pribadi dalam Sistem Informasi pada Perusahaan Jasa Keuangan. Journal Perspektif Administrasi Publik Dan Hukum, 2(2), 158–175.
Kredit Pintar. (2026). Terms of Service.
Marzuki, P. M. (2021). Penelitian Hukum (Edisi Revisi). Jakarta: Kencana.
Muhammad Faiq Nizam. (2026). Urgensi Perlindungan Data Pribadi Lewat Undang-Undang Nomor 27 Tahun 2022 Tentang Perlindungan Data Pribadi.
Natasya Klarisa Paruntu, & Amad Sudiro. (2025). Pergeseran Paradigma Pemulihan Aset Dalam Tindak Pidana Korupsi Untuk Mewujudkan Optimalisasi Pengembalian Kerugian Negara. Jurnal USM Law Review, 8(3), 1903–1929. https://doi.org/10.26623/julr.v8i3.12888
Otniel Yustisia Kristian. (2022). Perlindungan Hukum Pengguna Layanan Fintech p2p Lending dari Tindak Pidana Ekonomi dan Terhadap Penyedia Layanan Fintech P2P Lending Ilegal. Majalah Hukum Nasional, 52(2), 298.
Pranoto. (2025). Perlindungan Hukum Terhadap Emergency Contact Dalam Pinjaman Online Peer to Peer Lending. Jurnal Universitas Sebelas Maret, 13(2), 241.
Republik Indonesia. (2022). Pasal 20 ayat 1 Undang-Undang Nomor 27 Tahun 2022 tentang Pelindungan Data Pribadi.
Tegar Uji Asetko Runto, Tahasak Sahay, & Andika Wijaya. (2026). Perlindungan Hukum Terhadap Emergency Contact Dalam Pinjaman Online Peer to Peer Lending. Jurnal Universitas Sebelas Maret, 4(2), 2851.
Zhou, W., Zhang, D., Han, G., Zhu, W., & Wang, X. (2023). A blockchain-based privacy-preserving and fair data transaction model in IoT. Applied Sciences, 13(22), 12389.
Downloads
Published
How to Cite
Issue
Section
License
Copyright (c) 2026 Raka Haikal Anfasya, Andriyanto Adhi Nugroho, Iwan Erar Joesoef
This work is licensed under a Creative Commons Attribution 4.0 International License.
