Kata Kunci: Harmonisasi Hukum, Pinjaman Online, Perlindungan Konsumen.

Penelitian ini membahas mengenai harmonisasi pengaturan hukum sektor keuangan digital dalam memberikan pelindungan preventif dan represif bagi konsumen layanan pinjaman online. Hubungan hukum dalam layanan pinjaman online (peer-to-peer lending) dicirikan oleh adanya asimetri informasi dan ketidakseimbangan posisi tawar yang timpang akibat penggunaan klausula baku elektronik kaku dan algoritma automated credit scoring. Pasca-2022, pelindungan hukum konsumen diperkuat melalui integrasi regulasi payung, yaitu Undang-Undang Nomor 27 Tahun 2022 tentang Pelindungan Data Pribadi (UU PDP) dan Undang-Undang Nomor 4 Tahun 2023 tentang Pengembangan dan Penguatan Sektor Keuangan (UU P2SK), yang diturunkan secara teknis melalui berbagai Peraturan Otoritas Jasa Keuangan (POJK). Secara normatif, aspek perlindungan hukum preventif diwujudkan melalui penegakan kewajiban tata kelola data pribadi yang rigid dan transparansi informasi produk oleh Pelaku Usaha Jasa Keuangan (PUJK), sedangkan perlindungan represif diakomodasi melalui mekanisme sanksi administratif oleh OJK serta pemberian hak gugat keperdataan bagi konsumen. Namun demikian, penelitian ini menemukan adanya kesenjangan implementasi yang signifikan, di mana penanganan pelanggaran belum berjalan optimal karena unit pelayanan aduan internal (Internal Dispute Resolution/IDR) oleh perusahaan tekfin cenderung pasif dan mereduksi keadilan lewat jawaban otomatis kecerdasan buatan, serta penjatuhan sanksi administratif yang belum melahirkan efek jera yang kuat terhadap kegagalan tata kelola platform berizin maupun eksekusi darurat oleh Satgas PASTI terhadap entitas ilegal.

Keywords: Legal Harmonization, Peer-to-Peer Lending, Consumer Protection

This research analyzes the preventive and repressive legal protection for digital financial service users in Indonesia, specifically focusing on peer-to-peer (P2P) lending or online lending services. Normatively, the legal framework has transitioned into a more integrated ecosystem post-2022 through the enactment of two pivotal umbrella legislations: Law No. 27 of 2022 on Personal Data Protection (UU PDP) and Law No. 4 of 2023 on the Development and Strengthening of the Financial Sector (UU P2SK), implemented technically via Financial Services Authority Regulations (POJK). Preventive protection is manifested through rigid data governance and transparency obligations imposed on Financial Service Providers (PUJK), while repressive protection is established via administrative sanctions by the regulator and civil lawsuit rights for consumers. However, this study identifies a substantial implementation gap, where the regulatory framework in books remains misaligned with law enforcement in practice, characterized by persistent algorithmic data exploitation, unfair standard electronic contracts, and coercive debt collection methods that violate human rights. Furthermore, the layered dispute resolution system faces systemic failure at the initial stage, where the Internal Dispute Resolution (IDR) mechanisms of fintech platforms operate passively and diminish substantive justice through automated artificial intelligence template responses. Administrative sanctions enforced by OJK and emergency blockings by Satgas PASTI have also proven insufficient in creating a strong deterrent effect, as evidenced by gross corporate governance breakdowns and systematic default crises among licensed platforms.