The implementation of cashless toll transactions through the CANTAS application represents a digital transformation initiative by the Indonesian government to support the innovation of Toll Road 4.0 technology. This system is expected to improve travel time efficiency and reduce congestion at toll gates. However, its implementation presents various challenges, particularly concerning consumer protection. Toll road users may face risks related to safety, personal data privacy, and legal uncertainty regarding their rights.This study aims to analyze the responsibilities of business actors in cashless toll transactions based on CANTAS application policies and to identify legal consumer protection issues arising from the system's implementation in Indonesia. The methodology employed is a normative-empirical approach, which involves examining the applicable legal regulations, including the Consumer Protection Law and personal data protection regulations, while also incorporating empirical data such as interviews with stakeholders and field studies on the system's implementation.The qualitative analysis in this study reveals several issues with the implementation of the CANTAS application. These include unclear mechanisms for dispute resolution, uncertainty regarding the deletion of consumers' personal data, and safety risks due to reliance on mobile devices while driving. Comparative studies with countries like Australia and Hungary indicate that similar systems in these nations also face challenges related to data privacy protection and technology accuracy.Specific and comprehensive regulations are needed to ensure effective legal protection for consumers. Furthermore, stronger oversight of the implementation of cashless toll technology is essential to create a fair, safe, and convenient system for consumers