OJK Mandates Fintech Lending Transaction Reports and Bans Customer Data Trading

The Financial Services Authority (OJK) has strengthened the regulation of the peer-to-peer lending (Pindar) industry through the issuance of OJK Regulation (POJK) Number 8 of 2026 concerning the Reporting and Requesting of Funding Transaction Data by Information Technology-Based Joint Funding Service Providers (LPBBTI).

This regulation is intended to improve the quality of funding transaction data, strengthen industry discipline, and support more effective supervision. The issuance of POJK Number 8 of 2026 is one of the OJK’s steps to strengthen the data infrastructure of the digital financial services industry so that the supervisory process can be carried out more effectively, accurately, and on a risk-based approach.

“Through this POJK, the OJK regulates the obligation of Pindar Providers to submit Funding Transaction Data to the OJK completely, accurately, currently, wholly, and on time through the Reporting System managed by the OJK,” as quoted from an official statement on Wednesday (5/8/2026).

As the Reporting System managed by the OJK develops into a two-way system, Pindar providers are also obliged to submit transaction data to the Association through the Funding Transaction Data reporting information system (Fintech Data Center) in accordance with applicable provisions.

In addition to strengthening the reporting mechanism, this POJK also regulates the mechanism for requesting Recipient of Funds Information that can be utilised by providers to support the funding distribution process, the implementation of risk management, and compliance with OJK provisions. The use of such information is limited solely to purposes stipulated in laws and regulations.

This POJK also strengthens the aspect of user data protection by prohibiting Pindar Providers and Associations from providing and/or trading user information to other parties, except to comply with statutory provisions.

Providers are also responsible for the use of user information in accordance with the permitted purposes. To ensure compliance with these provisions, the OJK imposes administrative sanctions on providers that fail to meet reporting obligations, information usage requirements, or governance provisions as stipulated in this POJK.

Going forward, the strengthening of this reporting system is expected to improve the quality of Pindar industry governance, strengthen risk mitigation, increase public trust, and support the growth of a healthy, transparent, and sustainable digital funding industry.

As part of governance strengthening, this POJK requires every Pindar Provider to:

• appoint a member of the Board of Directors responsible for Funding Transaction Data reporting;

• have written policies and procedures related to the submission of transaction data and the use of Recipient of Funds Information;

• conduct periodic internal audits of the implementation of the Reporting System; and

• implement internal controls, including segregation of functions in the management of the Reporting System.