PENGAWASAN BANK INDONESIA ATAS KERAHASIAAN DAN KEAMANAN DATA/INFORMASI KONSUMEN FINANCIAL TECHNOLOGY PADA SEKTOR MOBILE PAYMENT

Abstract

Widespread use of Internet and smartphones in Indonesia triggers fintech transactions. Law Number 11 Year 2008 concearning Information and Electronic Transactions Article 26 Paragraph (1) explains that unless otherwise stipulated by statutory regulations, the use of any information through electronic media concerning a personal’s data must be carried out with the concent of the person concerned. However, it is prone to crime by breaking into the security systems of fintech. This study aims to determine the regulation of consumer data confidentiality and security of financial technology in the mobile payment sector and Bank Indonesia’s supervision on that matter. This is a normative study with legislative and conceptual approaches. Regulation on the Consumer Data/Information Confidentiality and Security of Financial Technology in Mobile Payment Sector is made by authorized institutions i.e. Bank Indonesia as regulators and supervisors in payment system and OJK (Financial Services Authority) in managing fintech categorized as non-bank institutions. Bank Indonesia has issued Regulation Number 7/6/PBI/2005 concerning provisions on Information Transparency of Bank Product and the Use of Customer’s Personal Data. Meanwhile, OJK manages data security based on Article 2 Letter d of the OJK Regulation Number 1/POJK.07/2013 concerning Consumer Protection of Financial Services Sector. Bank Indonesia supervises directly through Bank Indonesia Fintech office by holding “meet the start up” to consult and share about fintech. Policy wise, Bank Indonesia issued regulation concerning payment transaction processing, APU/PPT for non-banks, Bank Indonesia Regulations on Fintech and Regulatory Sandboxes and regulations on National Payment Gateway (NPG).