Masih tingginya angka temuan sediaan farmasi obat keras dan obat-obat tertentu yang diedarkan secara online di Indonesia mengindikasikan bahwa tindakan pemberantasan perlu terus dilakukan. Sehingga penelitian tesis ini merumuskan dua permasalahan utama, yaitu Bagaimana peredaran obat keras sesuai dengan peraturan perundang-undangan di Indonesia dan Bagaimana upaya Badan Pengawas Obat dan Makanan (BPOM) dalam menanggulangi peredaran obat keras secara bebas (offline dan online) di Indonesia. Metode penelitian hukum yang digunakan yuridis normatif yang didukung dengan wawancara. Hasil penelitian menujukkan Peredaran obat keras sesuai dengan peraturan perundang-undangan di Indonesia harus dilakukan sesuai dengan PerKa BPOM Nomor 9 tahun 2019 tentang Pedoman Cara Distribusi Obat yang Baik. Upaya Badan Pengawas Obat dan Makanan (BPOM) dalam menanggulangi peredaran obat keras secara bebas (offline dan online) di Indonesia merujuk kepada Undang-Undang Kesehatan Nomor 36 Tahun 2009 Tentang Kesehatan dan Undang-Undang No. 8 Tahun 1999 Tentang Perlindungan Konsumen. Pengawasan yang dilakukan pemerintah melalui BPOM mencakup pengawasan pre-market sampai post-market sehingga perlu ada kerja sama yang baik antara para penegak hukum tersebut dengan instansi terkait. BPOM juga melaksanakan cyber patrol untuk menelusuri dan mencegah peredaran obat dan makanan illegal di media online melalui platform situs, media sosial, dan e-commerce. Pengawasan cyber patrol dilakukan oleh BPOM bekerjasama dengan Tim Kepolisian serta dengan Kementerian Komunikasi dan Informasi. Terlebih melihat hambatan yang lebih besar dilakukan secara daring yang semakin berkembang seiring dengan perkembangan teknologi informasi. / The lack of attention to privacy issues on social networking sites is ironic. Considering the news about the violation of the privacy of social networking site users has been widely spread in various media. So that this thesis research formulates two main problems, namely how is legal protection against personal data violations on social media and how is legal protection applied to personal data violations on social media. The legal research method used is normative juridical with data collection techniques through library research, so that the research data is secondary data. The results of the study show that Indonesia does not yet have a policy or regulation regarding the protection of personal data in a special regulation so that there are still many cases of violation of privacy rights related to personal data. Personal data protection which specifically regulates the protection of personal data in the internet world, especially social media, has not yet been regulated. Meanwhile, currently the Personal Data Protection Bill has not been ratified into law. Regulations regarding personal data are still contained separately in several laws and regulations and only reflect aspects of personal data protection in general. Details and technical matters as well as specifically regulating the provisions of personal data protection, especially in the field of social media have not been regulated clearly. In Indonesia, cases of personal data breaches on social media are still very few that go into the realm of law or are dealt with firmly by law enforcement officials. Even though the government has prepared criminal sanctions for parties who violate data or misuse personal data belonging to others.