In today's modern era, to shop for things we need, we no longer must go through physical stores directly, but now it's very easy for us to make transactions through e-commerce. This convenience, of course, has many positive impacts on our lives, but of course, on the other hand, there are also negative impacts that threaten us, one of which is related to our personal data. In transacting in e-commerce, we as users are required to fill in personal data as a condition of being able to make transactions. However, this also holds a danger that awaits if the e-commerce that we use does not have a good security system to prevent the leakage of our personal data which can be misused and harm us by irresponsible parties. In this thesis, the author conducts a case study on Decision Number 235/Pdt.G/2020/PN.Jkt.Pst regarding the personal data leak case experienced by Tokopedia. This case of personal data leakage has caused immaterial losses for its users. The Indonesian consumer community who filed a lawsuit based on an unlawful act demanded that Tokopedia be subject to administrative sanctions for their mistake. However, after going through the evidentiary process in court, the judge decided not to accept the lawsuit from the Indonesian Consumer Community because of the lawsuit from the Indonesian Consumer Community which also sued the Minister of Communication and Information regarding administrative sanctions that should have been filed through the state administrative court.