In 2020, the Covid-19 virus has attacked every country in the world. Due to itsrapid spread, many people in Indonesia have been affected by the negative impacts of the virus. One of the negative impacts is the global economy, many businesses have gone bankrupt and closed down, many entrepreneurs have suffered losses and many more negative impacts. Thisis where many people decide to use online loan services to meet their needs. Online loans have very easy terms and conditions thatmake many people tempted. As a result, many people are not careful and get trapped in illegal online loans. Illegal online loans are dangerous because they arenot licensed and registered with the Otoritas Jasa Keuangan (OJK). Moreover, online loans already have their own rules in the law regarding registration procedures, implementation and sanctions if violated, but there are still many cases where consumer data is spread without permission by illegal online loan actors. Some victims who are affected do not have the strength to voice their rights and there is no special lawto protect consumers at that time. Therefore, this study aims to provide repressive actions to protect victims of data misuse by illegal online loans when viewed from the legal aspect of legislation based on certain legislation. regulations, namely the Personal Data Protection Lawrecently enacted by the state by outlining violations and articles that can be raised for victims of data misuse. This writing uses normative jurisprudence, starting from the juridical approach in the sense of lawas a norm where there is a law.