Efforts to protect consumers' personal data on e-commerce platforms can be carried out by conducting a Data Protection Impact Assessment. This article discusses the indicators of the execution of Data Protection Impact Assessment by pivoting on the rights of personal data subjects based on Law Number 27 of 2022.  This research uses a library research method by focusing on legal materials so that it can be said to be library based. The results show that Data Protection Impact Assessment is explained in Article 34 paragraph (1) of Law Number 27 of 2022 concerning Personal Data Protection which is then further regulated through Government Regulations as mandated by Article 34 paragraph (3). However, the Government Regulation relating to this matter has not yet been ratified, so it still refers to the mandate of Law Number 27 of 2022. This Data Protection Impact Assessment indicator can refer to Article 16 paragraph (2), Article 34 paragraph (1) and (2), Article 35, Article 20 paragraph (2), and Article 27 of Law Number 27 Year 2022. In terms of Data Protection Impact Assessment indicators as the protection of consumer personal data on e-commerce platforms, it can refer to the mandate that explains the rights of personal data subjects and their limitations in a separate article and the form of personal data processing as mandated by Article 34 paragraph (2) of Law No. 27 of 2022.

The online game industry is increasingly widespread and diverse in its practices to attract users, one of which is the use of the gacha system. This article discusses the gacha system in online games and its potential impact on children. Gacha, which involves paying for random in-game items, is often compared to gambling due to its elements of chance and the potential for profit. The system triggers dopamine release, making players feel pleasure, but children are particularly vulnerable to its mechanics. The article highlights the lack of juridical protection in Indonesia against online games that use gacha systems. While the Child Protection Law prohibits the economic exploitation of children, there are no specific regulations addressing gacha systems in online games. The authors identify the potential economic exploitation of children through gacha as a significant problem. They suggest two solutions: promoting traditional games with character-building content for children, and providing education on character development when introducing these games. From a legal perspective, the article calls for concrete protection measures for children playing online games with gacha systems. The research uses a normative juridical approach, employing library research based on literature.

Unauthorized use of personal data can cause harm to personal data subjects. In its mandate, Decision Number 78/Pid.Sus/2024/PN Tng provides a general outline of the potential harm that may occur to personal data subjects. However, the decision does not specifically explain the forms of loss and its impact on personal data subjects. This research critically discusses the forms of crimes causing harm and their impact on personal data subjects' damage due to unauthorized use of personal data in Decision Number 78/Pid.Sus/2024/PN Tng. The research employs the Library Research method, also known as Legal Research, which focuses on analyzing primary and secondary legal materials based on existing literature. The findings indicate that several general regulations in Indonesia address the crime of unauthorized use of personal data, including Law Number 24 of 2013, Law Number 1 of 2024, Law Number 14 of 2008, and Law Number 27 of 2022. Meanwhile, Decision Number 78/Pid.Sus/2024/PN Tng outlines the damage to personal data subjects resulting from unauthorized use of personal data, with this study revealing various impacts of damage both materially and non-materially.

 
Today's innovative industry is rapidly growing, fuelled by technology utilization and an increasingly diverse range of economic models. One of these models includes the rise of illegal financial technology peer-to-peer lending (illegal fintech P2P lending), which is increasingly gaining popularity within society. There exist various regulations designed to safeguard the personal data of debtors involved in illegal fintech P2P lending. This study employs a normative doctrinal approach utilizing three research methodologies: statute, comparative, and conceptual approach. The research reveals that while some standard rules have been elucidated, there lacks specificity regarding the responsible institution. The study collected information indicating numerous instances of debtors misusing personal data through illegal fintech P2P lending This highlights the continuous legal framework overseeing the balancing act of safeguarding personal data in Indonesia. comparing it to the typical legal principles governing personal data protection in other nations with principles on common law. Consequently, this study concludes that the current handling of debtors' personal data misuse in illegal fintech P2P lending by the Personal Data Protection Agency remains sectoral. It emphasizes the necessity for a more comprehensive, independent institution to offer optimal legal protection for debtors' personal data in the context of illegal P2P lending using fintech.

Procurement is not limited to the scope of goods but also extends to services. Therefore, it is essential to both quality goods and services. However, it cannot be denied that universities face various obstacles in terms of procuring goods and services, leading to several challenges. The problems addressed in this research are: (1) What are the issues faced in the procurement of goods and services at universities? (2) What is the problem-solving model for procurement of goods and services at universities? This research utilizes a qualitative approach, with a sociological juridical research method, or non-doctrinal research.