Main Article Content

Abstract

In the context of the rapid digital transformation of the financial sector, credit scoring systems are increasingly relying on big data and algorithmic techniques to assess individuals’ creditworthiness. This study aims to analyse legal gaps concerning rights over financial data in digital credit scoring practices, while also clarifying the level of consumer vulnerability within algorithm-driven decision-making environments. The paper employs a doctrinal legal analysis combined with comparative legal methods and an interdisciplinary approach, particularly integrating insights from behavioural economics to explain the impact of information asymmetry and bounded rationality on consumers within the digital financial ecosystem. The findings indicate that the current legal framework has not clearly established financial data control rights, and there remain significant deficiencies in transparency mechanisms and accountability structures governing automated credit scoring systems. On this basis, the study proposes several policy directions to strengthen consumers’ control over their data, enhance algorithmic transparency, and improve supervisory mechanisms in the digital financial sector.


[Dalam konteks transformasi digital yang berkembang pesat di sektor keuangan, sistem penilaian kredit (credit scoring) semakin bergantung pada big data dan teknik algoritmik untuk menilai kelayakan kredit individu. Penelitian ini bertujuan untuk menganalisis kesenjangan hukum yang berkaitan dengan hak atas data keuangan dalam praktik penilaian kredit digital, sekaligus menjelaskan tingkat kerentanan konsumen dalam lingkungan pengambilan keputusan yang didorong oleh algoritma. Artikel ini menggunakan metode analisis hukum doktrinal yang dipadukan dengan metode hukum komparatif dan pendekatan interdisipliner, khususnya dengan mengintegrasikan perspektif ekonomi perilaku (behavioural economics) untuk menjelaskan dampak asimetri informasi dan rasionalitas terbatas (bounded rationality) terhadap konsumen dalam ekosistem keuangan digital. Hasil penelitian menunjukkan bahwa kerangka hukum yang berlaku saat ini belum secara jelas menetapkan hak pengendalian atas data keuangan. Selain itu, masih terdapat kekurangan yang signifikan dalam mekanisme transparansi dan struktur akuntabilitas yang mengatur sistem penilaian kredit otomatis. Berdasarkan temuan tersebut, penelitian ini mengusulkan beberapa arah kebijakan untuk memperkuat kendali konsumen atas data mereka, meningkatkan transparansi algoritma, serta memperbaiki mekanisme pengawasan di sektor keuangan digital.]

Keywords

financial data digital credit scoring consumer protection legal gaps behavioural economics

Article Details

How to Cite
Who Owns Financial Data? Legal Gaps and Consumer Vulnerability in Digital Credit Scoring: Siapa Pemilik Data Keuangan? Kesenjangan Hukum dan Kerentanan Konsumen dalam Sistem Penilaian Kredit Digital. (2026). SiRad: Pelita Wawasan, 2(2), 211-222. https://doi.org/10.64728/sirad.v2i2.art4

How to Cite

Who Owns Financial Data? Legal Gaps and Consumer Vulnerability in Digital Credit Scoring: Siapa Pemilik Data Keuangan? Kesenjangan Hukum dan Kerentanan Konsumen dalam Sistem Penilaian Kredit Digital. (2026). SiRad: Pelita Wawasan, 2(2), 211-222. https://doi.org/10.64728/sirad.v2i2.art4

References

  1. Acquisti, A., Brandimarte, L., & Loewenstein, G. (2015). Privacy and human behavior in the age of information. Science, 347(6221), 509–514. https://doi.org/10.1126/science.aaa1465
  2. Akerlof, G. A. (1970). The market for “lemons”: Quality uncertainty and the market mechanism. Quarterly Journal of Economics, 84(3), 488–500. https://doi.org/10.2307/1879431
  3. Asian Development Bank. (2023). Financial digitalization and its implications for ASEAN+3 financial stability.
  4. Barocas, S., & Selbst, A. D. (2016). Big data’s disparate impact. California Law Review, 104(3), 671–732.
  5. Ben-Shahar, O., & Schneider, C. E. (2014). More than you wanted to know: The failure of mandated disclosure. Princeton University Press.
  6. Berg, T., Burg, V., Gombović, A., & Puri, M. (2020). On the rise of FinTechs: Credit scoring using digital footprints. Review of Financial Studies, 33(7), 2845–2897. https://doi.org/10.1093/rfs/hhz099
  7. Burrell, J. (2016). How the machine “thinks”: Understanding opacity in machine learning algorithms. Big Data & Society, 3(1), 1–12. https://doi.org/10.1177/2053951715622512
  8. Chi, F., Hwang, B.-H., & Zheng, Y. (2025). The use and usefulness of big data in finance: Evidence from financial analysts. Management Science, 71(6), 4599–4621. https://doi.org/10.1287/mnsc.2022.02659
  9. Citron, D. K., & Pasquale, F. (2014). The scored society: Due process for automated predictions. Washington Law Review, 89(1), 1–33.
  10. De Hert, P., & Papakonstantinou, V. (2016). The new General Data Protection Regulation: Still a sound system for the protection of individuals? Computer Law & Security Review, 32(2), 179–194. https://doi.org/10.1016/j.clsr.2016.02.006
  11. Dencik, L., Hintz, A., & Cable, J. (2019). Exploring data justice: Conceptions, applications and directions. Information, Communication & Society, 22(7), 873–881. https://doi.org/10.1080/1369118X.2019.1606268
  12. Doerr, S., Frost, J., Gambacorta, L., & Shreeti, V. (2023). Big techs in finance (BIS Working Paper No. 1129). Bank for International Settlements. https://www.bis.org/publ/work1129.pdf
  13. Edwards, L., & Veale, M. (2017). Slave to the algorithm? Why a ‘right to an explanation’ is probably not the remedy you are looking for. Duke Law & Technology Review, 16(1), 18–84.
  14. European Union. (2016a). Regulation (EU) 2016/679 (General Data Protection Regulation). Official Journal of the European Union.
  15. European Union. (2016b). Directive (EU) 2015/2366 on payment services in the internal market (PSD2). Official Journal of the European Union.
  16. Hildebrandt, M. (2018). Law for computer scientists and other folk. Oxford University Press.
  17. Hutchinson, T., & Duncan, N. (2012). Defining and describing what we do: Doctrinal legal research. Deakin Law Review, 17(1), 83–119.
  18. Jagtiani, J., & Lemieux, C. (2019). The roles of alternative data and machine learning in fintech lending: Evidence from the LendingClub consumer platform. Financial Management, 48(4), 1009–1029. https://doi.org/10.1111/fima.12295
  19. Kroll, J. A., Huey, J., Barocas, S., Felten, E. W., Reidenberg, J. R., Robinson, D. G., & Yu, H. (2017). Accountable algorithms. University of Pennsylvania Law Review, 165(3), 633–705.
  20. National Assembly of Vietnam. (2025). Law on personal data protection (Draft/Expected enactment in 2025).
  21. Organisation for Economic Co-operation and Development. (2019a). Artificial intelligence in society. OECD Publishing. https://doi.org/10.1787/eedfee77-en
  22. Organisation for Economic Co-operation and Development. (2019b). Enhancing access to and sharing of data: Reconciling risks and benefits for data re-use across societies. OECD Publishing. https://doi.org/10.1787/276aaca8-en
  23. Organisation for Economic Co-operation and Development. (2019c). OECD principles on artificial intelligence.
  24. Pasquale, F. (2015). The black box society: The secret algorithms that control money and information. Harvard University Press.
  25. Purtova, N. (2018). The law of everything: Broad concept of personal data and future of EU data protection law. Law, Innovation and Technology, 10(1), 40–81. https://doi.org/10.1080/17579961.2018.1452176
  26. Siems, M. (2014). Comparative law. Cambridge University Press.
  27. Simon, H. A. (1955). A behavioral model of rational choice. Quarterly Journal of Economics, 69(1), 99–118.
  28. Simon, H. A. (1957). Models of man: Social and rational. John Wiley & Sons.
  29. Sunstein, C. R. (2019). On freedom. Princeton University Press.
  30. Taylor, L. (2017). What is data justice? Big Data & Society, 4(2), 1–14.
  31. Thaler, R. H., & Sunstein, C. R. (2008). Nudge: Improving decisions about health, wealth, and happiness. Yale University Press.
  32. Varian, H. R. (2018). Artificial intelligence, economics, and industrial organization (NBER Working Paper No. 24839). National Bureau of Economic Research. https://www.nber.org/system/files/working_papers/w24839/w24839.pdf
  33. Voigt, P., & Von dem Bussche, A. (2017). The EU General Data Protection Regulation (GDPR): A practical guide. Springer.
  34. Wachter, S., & Mittelstadt, B. (2019). A right to reasonable inferences: Re-thinking data protection law in the age of big data and AI. Columbia Business Law Review, 2019(2), 494–620.
  35. Wachter, S., Mittelstadt, B., & Floridi, L. (2017). Why a right to explanation of automated decision-making does not exist in the General Data Protection Regulation. International Data Privacy Law, 7(2), 76–99. https://doi.org/10.1093/idpl/ipx005
  36. Watkins, D., & Burton, M. (2018). Research Methods in Law. Routledge. https://api.pageplace.de/preview/DT0400.9781315386652_A30449886/preview-9781315386652_A30449886.pdf.
  37. Yeung, K. (2018). Algorithmic regulation: A critical interrogation. Regulation & Governance, 12(4), 505–523. https://doi.org/10.1111/rego.12158
  38. Zarsky, T. (2016). The trouble with algorithmic decisions: An analytic road map to examine efficiency and fairness in automated and opaque decision making. Science, Technology, & Human Values, 41(1), 118–132. https://doi.org/10.1177/0162243915605575
  39. Zweigert, K., & Kötz, H. (1998). An introduction to comparative law. Oxford University Press.