Publication Search

Negotiation is the most fundamental form of Alternative Dispute Resolution (ADR), emphasizing the peaceful settlement of conflicts through direct dialogue between disputing parties without involving a third party. In Indonesia, negotiation has become one of the most widely used ADR mechanisms and has developed across various fields, including civil law, labor relations, administrative disputes, and environmental issues. This study aims to analyze negotiation as an ADR forum from two main perspectives. First, a theoretical review that examines the principles of negotiation, its stages, as well as its advantages and limitations compared to other dispute resolution mechanisms. Second, a practical review that elaborates on the implementation of negotiation within the Indonesian legal context through case studies of disputes resolved through negotiation. The research employs a normative-juridical approach to analyze the legal foundations and principles governing negotiation, combined with an empirical review through case data exploration and interviews with legal practitioners. The findings indicate that negotiation offers several advantages, including efficiency in time and cost, procedural flexibility, and the potential for mutually beneficial solutions (win–win solutions). However, this study also identifies challenges such as unequal bargaining positions between parties, limited legal recognition of negotiation outcomes, and the insufficient capacity of negotiators or informal mediators to fully grasp legal aspects. Based on these findings, the study recommends several strategic steps: enhancing legal recognition and protection for negotiation outcomes, strengthening the capacity and competence of negotiators through legal and communication skills training, and expanding the use of negotiation as an initial step in resolving various types of disputes. With stronger legal frameworks and improved human resources, negotiation has the potential to become a more effective, efficient, and sustainable dispute resolution instrument in Indonesia.

A fiduciary guarantee agreement is a formal agreement that must be stated in a notarial deed as regulated in Article 4 of the Fiduciary Guarantee Law. This provision states that a fiduciary guarantee is a subsidiary agreement of the main agreement that creates an obligation for the parties to fulfill a performance. Execution, in this context, is a legal action carried out based on a legally binding decision. Article 15 paragraph (2) of the Fiduciary Law explains that the executorial power of a fiduciary guarantee certificate allows for direct implementation without going through a court, is final, and binds the parties. This research uses an empirical normative method, namely combining library studies with field research. Primary data was obtained through interviews with Judges of the Yogyakarta District Court, Judges of the Sleman District Court, the Yogyakarta State Assets and Auction Service Office (KPKNL), and the Yogyakarta Regional Office of the Ministry of Law and Human Rights. Secondary data comes from primary, secondary, and tertiary legal materials. The analysis was conducted qualitatively. The research results indicate that following Constitutional Court Decision No. 18/PUU-XVII/2019, the execution of fiduciary collateral objects can no longer be carried out unilaterally by creditors, but must instead be filed through the District Court. This provision balances the legal standing between debtors and creditors and prevents potential arbitrariness. Nevertheless, execution through the courts is an alternative if there is no agreement between the parties regarding a default. The court's role following the Constitutional Court decision includes resolving disputes between creditors and debtors and ensuring that execution procedures are carried out in accordance with the HIR (Regional Regulations for the Protection of Creditors), RBG (Regional Regulations for the Protection of Creditors), and the Supreme Court's technical instructions. In general, the execution mechanism through the courts is considered quite effective in ensuring legal protection for both parties.

One example of a case of falsified documents in the issuance of overlapping land certificates occurred in East Luwu Regency and was raised in court through Decision Number 90/Pid.B/2020/PN MII. In this case, it was discovered that land certificate falsification was carried out by a land mafia, resulting in the emergence of two certificates for the same plot of land. This practice not only harms the legitimate owner but also creates laws and gives rise to complex agrarian conflicts. This research uses a normative juridical method, with an approach based on laws and court decisions. The results show that the preservation was an intentional act carried out by one party, with the aim of controlling land rights that did not belong to him. In the decision, the perpetrator was found guilty and sentenced because it was also proven to have falsified documents, as stipulated in Article 263 of the Criminal Code (KUHP). From this case, it can be concluded that law enforcement against overlapping duplicate certificates is very important to ensure legal certainty and protection. Protection efforts for land rights holders are carried out through a land registration process that complies with procedures based on Law Number 5 of 1960 concerning the Principles of Agrarian Law. Compliance with these procedures can provide a strong basis for identifying legitimate rights holders and preventing future damage, including cases of overlapping certificates caused by document falsification. To prevent the recurrence of similar cases, it is necessary to improve the monitoring system and digitize land data comprehensively by the National Land Agency (BPN). An integrated digital-based land system can minimize the opportunity for the issuance of duplicate certificates for a single plot of land, because all land rights data can be accessed and disclosed transparently and in real time.

The development of information and communication technology (ICT), particularly the use of Artificial Intelligence (AI), the Internet of Things (IoT), and big data, has transformed Indonesia's national security threat landscape. Threats that previously focused on traditional military aspects have now shifted to non-traditional cyber threats, such as cyberattacks, digital espionage, and infrastructure sabotage. According to PROXSIS IT GRC data, in 2024, more than 19 million cyberattacks were recorded against websites in Indonesia. While this figure is a decrease compared to the previous year, this trend is thought to reflect a shift towards more structured and organized tactics by threat actors. In response, the Indonesian government established the National Cybersecurity Action Plan 2024–2028 as a strategic guideline. Furthermore, cyber diplomacy is being promoted through bilateral and multilateral cooperation, for example through the signing of memorandums of understanding (MoUs) with the UK and Kaspersky. This cooperation includes the exchange of intelligence information, strengthening human resource capacity, raising public awareness regarding cybersecurity, and protecting critical information infrastructure. This study uses non-traditional security theory and defense diplomacy to analyze the strategies, challenges, and prospects of Indonesia's cyber policy. The analysis demonstrates that cyber defense diplomacy plays a crucial role as an instrument for integrating technology, regulation, and international collaboration in safeguarding digital sovereignty. In addition to strengthening threat detection and mitigation capabilities, this diplomacy also builds networks of trust with partner nations, which is essential amidst the increasing complexity of global threats. Therefore, in the era of digital globalization, full of interconnections, cyber defense diplomacy serves not only as a national protection tool but also as Indonesia's contribution to global cybersecurity stability. This effort prioritizes synergy between technological innovation, law enforcement, and sustainable international cooperation.

The rise in corruption cases in Indonesia significantly hampers investment, impacts national economic growth, and undermines the integrity of public institutions. This study highlights the strategic role of public mobilization as guardians of transparency in preventing potential corruption at the Danantara Investment Management Agency (BPI). Using a normative legal research approach enriched by qualitative analysis of the regulatory framework and best practices, this study examines the legal basis supporting public participation and formulates an effective corruption prevention strategy in the digital era. The results show that optimizing the role of the public through information transparency and the use of information and communication technology (ICT) plays a crucial role in building accountability and detecting irregularities. Access to audit data, financial evaluations, and public information is an important instrument in strengthening oversight. The use of ICT allows the public to analyze anomalous patterns, assess institutional performance, and provide constructive feedback on investment management policies. However, this mobilization faces significant challenges. First, the complexity of financial and regulatory data often makes it difficult for the general public to interpret. Second, limited digital literacy hinders the public's ability to utilize oversight technology. Third, the urgent need for certainty of legal protection for whistleblowers or oversight participants is a determining factor in the success of the mobilization. Therefore, strengthening regulations that guarantee legal protection, increasing digital literacy capacity, and developing user-friendly public oversight platforms are necessary. Synergy between the government, investment management institutions, and the public is key to creating a transparent, responsive, and adaptive oversight system to technological developments. This way, the active role of the public can be optimized to strengthen the integrity of BPI Danantara and promote a healthy investment climate in Indonesia.

This article examines Ibn Khaldun's philosophical perspective on wages and its relevance to the wage system in Indonesia in the modern era. Ibn Khaldun, a prominent 14th-century Muslim thinker, emphasized that wages are closely linked to the value of work, social justice, and the economic stability of a society. In his Muqaddimah, he emphasized that establishing fair wages is not merely an economic issue but also a moral and social pillar that can prevent societal disintegration. Equitable wages, he argued, must be able to guarantee a decent living for workers and their families, while also supporting continued productivity and social cohesion. This study uses a qualitative normative approach through content analysis of relevant texts in the Muqaddimah and comparing them with wage policies in Indonesia, including minimum wage regulations, labor protection, and welfare policies. Data were obtained from library research, national regulations, and recent academic literature on wage policies. The results of the study indicate that although Indonesia has a minimum wage regulation, its implementation still faces significant challenges, particularly in ensuring fairness for informal sector and low-income workers. Factors such as regional economic inequality, inflation, and weak labor oversight often undermine the effectiveness of these policies. By revisiting the principles of Ibn Khaldun, this article offers the perspective that ideal wages should not only be measured by labor market needs but should also integrate principles of ethics, morality, and social responsibility. This integration is expected to strengthen worker welfare, increase national productivity, and maintain long-term economic stability. This study also provides a relevant philosophical framework for critiquing and reforming wage policies in Indonesia, with reference to the values of justice and welfare in classical Islamic economics.

Punitive populism is a political-legal phenomenon that replaces legal rationality and corrective justice with a rhetoric of power that negates the protection of human rights and the rehabilitative function of the criminal justice system. In this context, criminal policy tends to be characterized by a repressive approach that prioritizes symbolic punishment for short-term political legitimacy. Social polarization further strengthens the destructive power of punitive populism by making the issue of crime a symbolic instrument in identity conflicts, thereby losing its autonomy and submitting to an emotional, majoritarian logic. This study aims to analyze how punitive populism, as a product of the interaction between populist logic and social polarization, results in the erosion of the basic values of modern law, particularly the principles of proportionality, legal certainty, and human rights protection. Furthermore, this study also identifies structural barriers that hinder efforts to curb its expansion in criminal policy. The study uses qualitative methods with a conceptual approach. Data were obtained through library research of academic literature, legal documents, and policy analysis, then processed using qualitative analysis techniques and presented descriptively. The research findings show that punitive populism has shifted the orientation of criminal policy from a paradigm of justice and rehabilitation to a logic of punishment that is reactive to public emotional distress. The mass media, particularly within a polarized information ecosystem, plays a role in shaping distorted perceptions of crime, thereby reinforcing public demands for harsh and immediate policies. This situation creates legal vulnerability to political instrumentalism, threatens the principle of the rule of law, and deepens social exclusion of vulnerable groups. To address this, strategic steps are needed, including limiting fear-based political rhetoric, strengthening independent legal institutions, and rebuilding a criminal law paradigm based on substantive justice, inclusivity, and respect for human rights.

Advances in digital technology have brought significant changes to various aspects of life, including socio-economic activities such as arisan (social gathering). Arisan, which was previously conducted conventionally, has now begun to transform into online arisan. This change offers several advantages, including ease of access, reduced time constraints, and a wider range of participation. However, behind this convenience, an equally important challenge lies the lack of regulation and oversight of online arisan practices, which are prone to legal threats. This study aims to examine the urgency of creating written agreements in the implementation of online arisan and examine their legal force as a form of legal protection for the actors, both organizers and members. Using a normative juridical method through a regulatory-statutory approach and case studies, this study emphasizes the importance of legal validity in civil relations formed through online arisan. Data were obtained through observation, interviews, and documentation, which were then analyzed through a process of data reduction, presentation, and drawing conclusions. The results of the study indicate that written agreements in online arisan have legally binding force as long as they meet the requirements for a valid agreement according to Article 1320 of the Civil Code. The existence of a written agreement can increase legal certainty, strengthen the legal standing of the parties, and serve as valid evidence in the event of a breach of contract. Therefore, creating a written agreement is crucial to avoid losses and strengthen legal protection in online arisan (social savings and credit) practices. Furthermore, a written agreement also reflects the good faith of the parties in carrying out their commitments professionally and responsibly. This serves as an important foundation for building trust and creating a transparent and accountable online arisan system. Therefore, it is recommended that every online arisan participant create a clear written agreement and have it notarized to strengthen its legality.

Ownership rights to houses and buildings are the highest form of ownership recognized in the land law system in Indonesia. The legality of this ownership right is vital to ensure legal certainty for the owner and prevent potential disputes that may arise due to unclear ownership status. The study analyzes the legal aspects of ownership rights to houses and buildings, including the legal basis, acquisition procedures, and legal protection mechanisms available to the owner. In addition, this study also examines various problems that often arise in the ownership of property rights, such as overlapping certificates, ownership conflicts, and legal implications in the process of transferring rights. The analysis uses a normative legal method with a conceptual and statutory approach. The Basic Agrarian Law (UUPA), Government Regulations, and Regulations of the Minister of Agrarian Affairs and Spatial Planning/Head of the National Land Agency (ATR/BPN) are among the regulations that control ownership rights to land and buildings. The statutory approach is carried out by examining these regulations. Meanwhile, the conceptual approach is applied to examine the concept of ownership in land law and the underlying legal principles. The data used in this study are sourced from literature studies, including legal literature, academic journals, and official documents related to land regulations in Indonesia. The results of this study are expected to contribute to a more comprehensive understanding of the legality of ownership rights to houses and buildings, as well as being a reference for landowners, legal practitioners, and the government in managing the legal aspects of land and building ownership. With firmer legal certainty, it is hoped that a more transparent and equitable land system can be created for all interested parties.

In the criminal justice system, legal protection for mental health is an important problem, particularly when sexual abuse is involved. Sexual assault victims often experience prolonged psychological trauma, while perpetrators may also have mental health conditions that need to be considered in the judicial process. The criminal justice system in Indonesia has not fully provided adequate protection for mental health aspects for both victims and perpetrators. In this context, it is important to examine the regulations governing mental health protection in the criminal justice system and how they are applied in the practice of law. This study employs a normative methodology that combines a conceptual and statutory approach. Implementing the statute approach is done by analyzing various regulations related to mental health protection in the criminal justice system, both in national law and international legal instruments. Meanwhile, the conceptual approach is used to examine the theory of legal protection, the theory of mental health in criminal law, and the restorative justice approach as an alternative in handling cases of sexual violence. The data were obtained through a literature study by reviewing laws and regulations, scientific journals, law books, and relevant official documents. Through this study, it is expected to find a normative mapping regarding legal protection for mental health in the criminal justice system, especially for victims and perpetrators of sexual abuse. This study also intends to identify gaps in existing rules and make ideas for revisions to promote legal protection for mental health in the criminal justice system in Indonesia.

The rise of online loans (commonly known as pinjol) reflects the broader transformation of conventional financial systems into digital platforms, influenced heavily by the rapid development of financial technology (fintech). While online loans offer ease and accessibility, their implementation has raised significant legal concerns—particularly relating to the violation of privacy and the rights of third parties who are not directly involved in the loan agreement. One of the main legal issues occurs during the debt collection process, where third parties—often relatives, colleagues, or acquaintances of debtors—are subjected to intimidation, unlawful dissemination of personal data, and public defamation. These practices are not only unethical but also infringe on the privacy and dignity of uninvolved individuals. This article employs a legal research method using a normative approach. As a normative legal study, it analyzes laws, regulations, and legal literature relevant to the problem. The study finds that current legal regulations do not adequately protect third parties from the harmful practices associated with online loan collections. In response, there is a pressing need for regulatory reform. This includes strengthening personal data protection laws, enhancing supervision mechanisms over fintech companies, and ensuring that legal standards are consistently enforced. Reformulating these regulations will help address the legal vacuum and ensure greater legal certainty and protection for all individuals affected by online loan transactions. Through comprehensive policy changes and stronger enforcement, the negative impact of online loans can be mitigated, safeguarding both borrowers and uninvolved third parties.

The rapid development of information and communication technology has brought significant changes to social, economic, and political life in Indonesia. However, the complex and rapidly changing dynamics of cyberspace present major challenges in statute, personal data protection, disinformation, and cybersecurity. Unfortunately, the existing regulatory framework is still sectoral and has not yet responded holistically to the various digital issues that arise. This fragmented approach often leads to overlapping authorities, inconsistent enforcement, and gaps in addressing emerging cyber threats. Therefore, the establishment of the National Digital Commission is urgently needed as an independent institution tasked with coordinating, formulating, and overseeing digital policies in an integrated and systematic manner. This commission should consist of multidisciplinary experts in law, technology, and public policy, ensuring balanced perspectives in policy formulation. In addition, it should serve as a bridge between the government, the private sector, and civil society to facilitate inclusive and transparent digital governance. The National Digital Commission is expected to ensure cyberspace governance that is responsive to technological developments while maintaining digital resilience. It must also actively promote digital literacy, ethical online behavior, and responsible use of social media platforms to combat hoaxes and hate speech. Furthermore, the commission must strengthen Indonesia’s cybersecurity infrastructure to protect national interests and uphold the rights of its citizens in the digital space. By creating a unified regulatory framework and robust oversight mechanism, Indonesia can build a safer and more democratic digital ecosystem. This effort is essential in reinforcing accountability, defending cybersecurity, advancing democracy, ensuring governance, and safeguarding innovation in the face of rapid digital transformation.

This research examines in-depth legal protection against cybercrime in Indonesia, with a specific focus on ransomware attacks. It also evaluates the 2025 Draft Cyber Security and Resilience Law (RUU KKS) as a measure to strengthen the national cyber defense system. The increase in ransomware cases targeting personal data, public institutions, and vital infrastructure has posed a serious threat to information security and national stability. Although the 2008 Electronic Information and Transactions Law (UU ITE) and the 2022 Personal Data Protection Law (UU PDP) serve as the legal basis, these two regulations do not yet specifically and comprehensively regulate ransomware. This results in challenges in law enforcement and victim protection, both in technical aspects, coordination, and human rights protection. The research method used is normative legal with a qualitative approach, which includes analysis of primary and secondary legal materials, as well as comparisons with regulations in several countries that have more mature ransomware handling mechanisms. The analysis of the 2025 Cyber Security Bill (RUU KKS) indicates that this draft regulation has the potential to strengthen the authority of cyber authorities, mandate reporting of cyber incidents, and impose stricter sanctions on perpetrators. However, implementing this policy requires effective cross-agency coordination, transparent oversight, and synergy between the public and private sectors. This study concludes that the 2025 Cyber Security Bill (RUU KKS) represents a strategic step in building a national cybersecurity system that is adaptive, integrated, and responsive to evolving cyber threats. However, its success will depend heavily on improving public digital security literacy, multi-sectoral collaboration, investment in detection and prevention technology, and guaranteeing human rights protection. These findings are expected to provide input for policymakers in formulating comprehensive and sustainable cybersecurity regulations as a bulwark of national defense in the digital era.

This community service activity aims to increase the capacity of disaster archival document management and strengthen financial governance within the Muhammadiyah Disaster Management Center (MDMC) in Palangka Raya City. Orderly, systematic, and accountable archive management is a crucial factor in supporting a rapid, precise, and coordinated disaster response. Furthermore, transparent and efficient financial governance is the foundation for program sustainability and public trust in the organization. This training program is designed to provide MDMC administrators and volunteers with a comprehensive understanding of the principles, procedures, and best practices in disaster archive management and organizational finances. The implementation method includes presentations through interactive lectures combined with group discussions to identify real-world problems and solutions. Participants also have the opportunity to engage in hands-on practice, such as compiling disaster archival documents, managing archive databases, and creating simple financial reports in accordance with nonprofit accounting standards. Furthermore, this training introduces national regulations related to archiving and data protection, ensuring that practices are aligned with statutory provisions. The results of the training demonstrated an increased understanding of the participants regarding the importance of archive management and financial governance, as evidenced by their ability to systematically organize documents and present accountable financial reports. It is hoped that, after the training, participants will be able to consistently apply these principles in MDMC's operational activities. This will create a well-organized documentation system, accountable financial management, and an MDMC institution that is increasingly professional, effective, and responsive to community needs in emergency situations. This activity is a strategic step to strengthen MDMC's role as the vanguard in disaster management at the local and national levels.

This community service activity aims to increase the capacity of disaster archival document management and strengthen financial governance within the Muhammadiyah Disaster Management Center (MDMC) in Palangka Raya City. Orderly, systematic, and accountable archive management is a crucial factor in supporting a rapid, precise, and coordinated disaster response. Furthermore, transparent and efficient financial governance is the foundation for program sustainability and public trust in the organization. This training program is designed to provide MDMC administrators and volunteers with a comprehensive understanding of the principles, procedures, and best practices in disaster archive management and organizational finances. The implementation method includes presentations through interactive lectures combined with group discussions to identify real-world problems and solutions. Participants also have the opportunity to engage in hands-on practice, such as compiling disaster archival documents, managing archive databases, and creating simple financial reports in accordance with nonprofit accounting standards. Furthermore, this training introduces national regulations related to archiving and data protection, ensuring that practices are aligned with statutory provisions. The results of the training demonstrated an increased understanding of the participants regarding the importance of archive management and financial governance, as evidenced by their ability to systematically organize documents and present accountable financial reports. It is hoped that, after the training, participants will be able to consistently apply these principles in MDMC's operational activities. This will create a well-organized documentation system, accountable financial management, and an MDMC institution that is increasingly professional, effective, and responsive to community needs in emergency situations. This activity is a strategic step to strengthen MDMC's role as the vanguard in disaster management at the local and national levels.

The development of digital technology has had a significant impact on people's lives, including the protection of citizens' privacy rights. One key issue that has emerged is the management and protection of personal data, which is increasingly vulnerable to misuse. This study aims to examine and compare the personal data protection provisions stipulated in the 2024 Electronic Information and Transactions Law (ITE Law) and Law Number 27 of 2022 concerning Personal Data Protection (PDP Law). The research method used is a normative approach with comparative study techniques. The study focuses on the legal substance, scope of data protection, and institutional roles in implementing both regulations. The analysis shows that the ITE Law remains general in nature, lacking specific detailed regulations governing personal data protection mechanisms. Meanwhile, the PDP Law presents a more systematic and comprehensive specific regulation, referencing international principles such as the General Data Protection Regulation (GDPR) in the European Union. However, several implementation challenges exist, including overlapping authority between institutions, inconsistencies in legal norms, and limited adequate legal infrastructure. This situation has the potential to create regulatory dualism and complicate the law enforcement process. Therefore, steps are needed to harmonize the ITE Law and the PDP Law, strengthen the capacity of institutions responsible for data protection, and increase the digital literacy of the public so that citizens' digital rights can be optimally protected in the digital era.

Early marriage remains a social issue occurring in various regions, including Golo Kondeng Village, West Manggarai Regency, East Nusa Tenggara Province. This study aims to examine the form of legal protection afforded to the status of children born from early marriages conducted based on local customary law. This research employs a qualitative approach with a case study method, collecting data through in-depth interviews with community leaders, parents, and relevant village authorities. The findings indicate that early marriage practices in Golo Kondeng Village are influenced by several factors, including cultural values, family economic conditions, and the community’s level of education. Although existing laws—such as Law Number 16 of 2019, which amends Law Number 1 of 1974 on Marriage by establishing the minimum marriage age at 19 for both men and women, and Law Number 35 of 2014 on Child Protection—clearly regulate the legal age for marriage, the reality shows that early marriages continue to occur, often neglecting the fulfillment of children’s rights. The current legal protections are not yet fully effective in securing the legal status of these children, both in terms of civil and social rights. Based on these findings, this study recommends enhancing legal education and outreach to the community regarding marriage laws and children's rights. In addition, the active involvement of traditional leaders and local government is considered essential in addressing the issue of early marriage. It is hoped that through these efforts, children born from early marriages can receive adequate legal protection and have their rights fully fulfilled.

This study aims to examine the influence of accounting information technology and accounting information system protection on cybersecurity accounting. Using a quantitative approach, data were collected through a structured survey of 100 respondents, selected using purposive sampling, and analyzed to assess the relationship between the research variables. The research instrument consisted of three main constructs: Accounting Information Technology (X1), Accounting Information System Protection (X2), and Cybersecurity Accounting (Y), each measured using 16 question items. Instrument validity testing revealed that 44 out of 48 items met the validity threshold, with correlation coefficients exceeding 0.300, while reliability analysis indicated Cronbach’s Alpha values greater than 0.60 for all variables, confirming internal consistency. Data analysis was performed using multiple linear regression. The results demonstrate that accounting information technology has a positive and statistically significant effect on cybersecurity accounting (coefficient = 0.264; p < 0.05), suggesting that the integration and optimization of technology in accounting processes contribute to enhanced cybersecurity practices. Conversely, accounting information system protection exhibits a negative and statistically significant effect on cybersecurity accounting (coefficient = -0.149; p < 0.05). This unexpected finding indicates that certain protective measures within accounting information systems may, under certain conditions, hinder cybersecurity performance, potentially due to implementation complexity, inadequate configuration, or user resistance. The regression model as a whole is statistically significant (F = 18.577; p = 0.000), with a coefficient of determination (R²) of 0.277. This implies that the two independent variables together explain 27.7% of the variance in cybersecurity accounting, while the remaining 72.3% is attributable to other factors not examined in this study.

This study employs a normative juridical approach to examine the legal aspects of implementing financial technology (fintech) in healthcare financing in Indonesia. The rapid development of fintech offers potential solutions for addressing financial barriers in healthcare access. However, it also presents legal and regulatory challenges, particularly concerning consumer protection, data privacy, and institutional coordination. The analysis focuses on several key legal instruments, including Law No. 8 of 1999 on Consumer Protection, Law No. 11 of 2008 on Electronic Information and Transactions (ITE), Law No. 17 of 2023 on Health and its implementing regulation, Government Regulation No. 28 of 2024, and Law No. 27 of 2022 on Personal Data Protection. Additionally, regulations issued by the Financial Services Authority (OJK), which govern the operations of fintech companies in Indonesia, are also considered. The findings indicate that while there is a growing regulatory framework supporting fintech integration into the health sector, several gaps remain, particularly in terms of coordination between regulatory bodies and stakeholders in health and finance. The study identifies the need for comprehensive policy harmonization to ensure that fintech-based healthcare financing systems are secure, transparent, and inclusive. Furthermore, it emphasizes the importance of strengthening data protection mechanisms and enhancing regulatory oversight, especially for fintech services operating in partnership with healthcare providers. As fintech continues to reshape the landscape of healthcare financing, robust legal safeguards must be developed to mitigate potential risks and ensure equitable access to health services. The study concludes by recommending an integrated legal and institutional approach to support the safe and ethical implementation of fintech in Indonesia's healthcare sector.

The rapid growth of information technology has driven digital transformation in various sectors, including micro, small, and medium enterprises (MSMEs), the backbone of the Indonesian economy. In response to the challenges and opportunities of digitalization, the Surabaya City Government launched the Peken e-commerce platform on October 31, 2021. This platform aims to help MSMEs market their products online, expand market reach, and increase competitiveness. However, the use of digital systems also presents new challenges, particularly in terms of cybersecurity. Dependence on technology opens the door to various threats that can compromise data confidentiality, integrity, and availability. This study aims to analyze and evaluate information security risks on the Peken Surabaya website using a risk management approach based on the ISO/IEC 27005:2019 standard. The analysis method involves identifying information assets, recognizing potential threats, identifying vulnerabilities, and assessing risk levels based on the likelihood of occurrence and impact. To support the analysis, technical testing was also conducted using the Open Web Application Security Project Zed Attack Proxy (OWASP ZAP) tool. The research results indicate that most of the risks faced by Peken Surabaya are moderate to very high. These risks include Distributed Denial of Service (DDoS) attacks, user data leaks, and the lack of a two-factor authentication (2FA) system. Based on these findings, a risk management strategy was developed using the Risk Modification, Risk Sharing, Risk Retention, and Risk Avoidance approaches. Furthermore, this study recommends security controls based on ISO/IEC 27005 and OWASP Top 10 to enhance system protection. These findings emphasize the importance of implementing international standards-based risk management in maintaining the continuity and security of digital public services, particularly those supporting the MSME sector in the digital era.