The purpose of this study is to analyze the legal responsibility of banks towards customers in cases of personal data leaks, examine the extent of legal protection provided to customers, and describe efforts that can be made to minimize the risk of data leaks. This study uses a literature study method by collecting and analyzing various legal sources, such as laws and regulations, court decisions, journals, and literature related to data protection in the banking sector. The results of the study indicate that banks have legal responsibilities based on the Personal Data Protection Law (UU PDP) and banking provisions to maintain the confidentiality of customer data. If a data leak occurs, the bank can be subject to administrative, civil, or even criminal sanctions depending on the level of negligence. In addition, this study found that customers have the right to claim compensation if the data leak causes material or immaterial losses. However, the effectiveness of law enforcement still faces challenges, such as lack of customer awareness and complexity of evidence. Therefore, it is necessary to strengthen regulations, improve cybersecurity systems by banks, and educate customers to mitigate the risk of data leaks. The implications of this study are expected to provide recommendations for regulators and banking industry players in strengthening the protection of customer personal data.
