Digital Transformation and Regulatory Approaches in Capital Markets: A Comparative Legal Study of Indonesia and Malaysia
DOI:
https://doi.org/10.15575/kh.v8i2.54293Keywords:
Capital Markets, digital assets, digital transformation, fintech regulation, investor data protectionAbstract
This study aims to compare the regulatory frameworks governing fintech innovation, blockchain and digital assets, and investor data protection in the capital markets of Indonesia and Malaysia. It employs normative legal research using statute, comparative, and conceptual approaches. The analysis is based on primary legal materials, including legislation, regulatory guidelines, supervisory instruments, and official policy documents, as well as secondary legal materials, including academic literature and policy reports. The collected materials are examined through descriptive and comparative legal analysis. The findings demonstrate that Indonesia and Malaysia pursue broadly similar regulatory objectives through licensing, governance requirements, supervisory mechanisms, risk management, and investor protection. However, the two jurisdictions differ significantly in their institutional architecture. Indonesia adopts an integrated financial-sector regulatory approach under the Financial Services Authority, whereas Malaysia applies a more specialised capital-market supervisory model through the Securities Commission Malaysia. These institutional differences influence regulatory coherence, supervisory coordination, legal certainty, and regulators' capacity to address technology-specific risks. The findings imply that Indonesia should strengthen inter-institutional coordination and technology-specific supervisory standards, while both jurisdictions should ensure that innovation policies remain closely connected with cybersecurity, operational resilience, and investor protection. The originality of this study lies in integrating fintech regulation, digital asset governance, and investor data protection within a single comparative legal framework focused on regulatory coherence and institutional design.
References
AlBenJasim, S., Dargahi, T., Takruri, H., & Al-Zaidi, R. (2024). FinTech Cybersecurity Challenges and Regulations: Bahrain Case Study. Journal of Computer Information Systems, 64(6), 835–851. https://doi.org/10.1080/08874417.2023.2251455
Begum, A., Munira, M. S. K., & Juthi, S. (2022). Systematic review of blockchain technology in trade finance and banking security. American Journal of Scholarly Research and Innovation, 1(1), 25–52. https://doi.org/10.63125/vs65vx40
Blumenstock, J. E., & Kohli, N. (2023). Big Data Privacy in Emerging Market Fintech and Financial Services: A Research Agenda. In Working Paper Series: Center for Effective Global Action (WPS Paper No. 231). https://doi.org/10.26085/C3WK53
Carvalho, C. E., Pires, D. A., Artioli, M., & Oliveira, G. C. de. (2021). Cryptocurrencies: technology, initiatives of banks and central banks, and regulatory challenges. Economia e Sociedade, 30(2), 467–496. https://doi.org/10.1590/1982-3533.2021v30n2art08
Chen, G. K. H., & Taeihagh, A. (2026). Designing regulatory sandboxes: a comprehensive framework for aligning functionalities and objectives. Policy Design and Practice, 9(1), 1–15. https://doi.org/10.1080/25741292.2025.2570954
Collomb, A., De Filippi, P., & Sok, K. (2019). Blockchain Technology and Financial Regulation: A Risk-Based Approach to the Regulation of ICOs. European Journal of Risk Regulation, 10(2), 263–314. https://doi.org/10.1017/err.2019.41
Darem, A. A., Alhashmi, A. A., Alkhaldi, T. M., Alashjaee, A. M., Alanazi, S. M., & Ebad, S. A. (2023). Cyber Threats Classifications and Countermeasures in Banking and Financial Sector. IEEE Access, 11, 125138–125158. https://doi.org/10.1109/ACCESS.2023.3327016
Diniyya, A. A., Aulia, M., & Wahyudi, R. (2021). Financial Technology Regulation in Malaysia and Indonesia: A Comparative Study. Ihtifaz: Journal of Islamic Economics, Finance, and Banking, 3(2), 67. https://doi.org/10.12928/ijiefb.v3i2.2703
Feinstein, B. D., & Werbach, K. (2020). The Impact of Cryptocurrency Regulation on Trading Markets. SSRN Electronic Journal. https://doi.org/10.2139/ssrn.3649475
Ferreira, A., & Sandner, P. (2021). Eu search for regulatory answers to crypto assets and their place in the financial markets’ infrastructure. Computer Law & Security Review, 43, 105632. https://doi.org/10.1016/j.clsr.2021.105632
Hasan, Z. (2024). Impact of Digital Financial Literacy on Consumer Protection, Investor Security, and Financial Transactions in Indonesia. International Journal of Islamic Economics and Finance Research, 7(2 December), 55–77. https://doi.org/10.53840/ijiefer165
Huibers, F. (2021). Regulatory Response to the Rise of Fintech Credit in The Netherlands. Journal of Risk and Financial Management, 14(8), 368. https://doi.org/10.3390/jrfm14080368
Khalid, M., & Kunhibava, S. (2020). Fintech Regulatory Sandboxes in Australia and Malaysia: A Legal Analysis. IIUM Law Journal, 28(1), 1–35. https://doi.org/10.31436/iiumlj.v28i1.475
Khatib, S. F. A., Mustafa, Z., & Abbas, A. F. (2025). Digital Transformation and Financial Sustainability. In & S. R. H. Raza, A. Riaz, N. Riaz (Ed.), Algorithmic Training, Future Markets, and Big Data for Finance Digitalization (pp. 33–74). IGI Global Scientific Publishing. https://doi.org/10.4018/979-8-3693-6386-7.ch002
Kunhibava, S., Mustapha, Z., Muneeza, A., Sa’ad, A. A., & Karim, M. E. (2021). Ṣukūk on blockchain: a legal, regulatory and Sharī’ah review. ISRA International Journal of Islamic Finance, 13(1), 118–135. https://doi.org/10.1108/IJIF-06-2020-0120
Marzuki, M. (2017). Penelitian Hukum: Edisi Revisi. Prenada Media.
Maume, P. (2018). Regulating Robo-Advisory. SSRN Electronic Journal. https://doi.org/10.2139/ssrn.3167137
Muryanto, Y. T. (2023). The urgency of sharia compliance regulations for Islamic Fintechs: a comparative study of Indonesia, Malaysia and the United Kingdom. Journal of Financial Crime, 30(5), 1264–1278. https://doi.org/10.1108/JFC-05-2022-0099
Napitupulu, J. H., Panggabean, M. L., Panjaitan, H., & Widiarty, W. S. (2025). An Integrated Legal Framework for Digital Investment Fraud Prevention in Indonesia. Journal of Sustainable Development and Regulatory Issues (JSDERI), 3(3), 540–567. https://doi.org/10.53955/jsderi.v3i3.154
Odong, U. (2026). Regulator coherence, capacity, and collaboration: applying lessons from Canada and the UK for fintech regulatory sandboxes. International Journal of Law And Information Technology, 34. https://doi.org/10.1093/ijlit/eaaf018
OJK. (2025). Indonesia Capital Market Strengthens with Integrity Throughout 2025, The Closing of Trade of Indonesia Stock Exchange of 2025. Otoritas Jasa Keuangan. https://ojk.go.id/en/berita-dan-kegiatan/siaran-pers/Pages/Indonesia-Capital-Market-Strengthens-with-Integrity-Throughout-2025-The-Closing-of-Trade-of-Indonesia-Stock-Exchange.aspx
Pakpahan, E. F., Jessica, J., Winar, C., & Andriaman, A. (2020). Peran Otoritas Jasa Keuangan (OJK) dalam Mengawasi Maraknya Pelayanan Financial Technology (Fintech) di Indonesia. Jurnal Magister Hukum Udayana (Udayana Master Law Journal), 9(3), 559. https://doi.org/10.24843/JMHU.2020.v09.i03.p08
Patil, A., Mishra, B., Chockalingam, S., Misra, S., & Kvalvik, P. (2025). Securing financial systems through data sovereignty: a systematic review of approaches and regulations. International Journal of Information Security, 24(4), 159. https://doi.org/10.1007/s10207-025-01074-4
Priem, R. (2020). Distributed ledger technology for securities clearing and settlement: benefits, risks, and regulatory implications. Financial Innovation, 6(1), 11. https://doi.org/10.1186/s40854-019-0169-6
Securities Commission Malaysia. (2025). Advancing a Vibrant, Inclusive and Sustainable Capital Market with Regional and Islamic Leadership. https://www.sc.com.my/api/documentms/download.ashx?id=d3de7d82-0afc-45c3-ba7b-901774219c86
Shalihah, F., & Mohd Shariff, R. N. (2022). Identifying Barriers to Data Protection and Investor Privacy in Equity Crowdfunding. UUM Journal of Legal Studies, 13. https://doi.org/10.32890/uumjls2022.13.2.9
Siems, M. (2022). Comparative Law. Cambridge University Press. https://doi.org/10.1017/9781108892766
Sobri, M. A. M., & Rab, M. A. A. (2024). Regulatory Frameworks for Crypto Assets: Comparative Fiqh Study Between Malaysia and Indonesia. SALAM Digest: Syariah and Law Undergraduate Symposium, 2(1), 66–77.
Soekanto, S., & Mamudji, S. (2010). Penelitian hukum normatif : suatu tinjauan singkat. RajaGrafindo Persada.
Sufian, M. H., Sutan Syahril, N. A., & Ghapa, N. (2024). Regulatory Framework for Cryptocurrency: A Comparative Analysis of Malaysia, Indonesia and Singapore. Malaysian Journal of Social Sciences and Humanities (MJSSH), 9(11), e003113. https://doi.org/10.47405/mjssh.v9i11.3113
Sukumaran, S., Bee, T. S., & Wasiuzzaman, S. (2022). Cryptocurrency as an Investment: The Malaysian Context. Risks, 10(4), 86. https://doi.org/10.3390/risks10040086
Taeihagh, A., Ramesh, M., & Howlett, M. (2021). Assessing the regulatory challenges of emerging disruptive technologies. Regulation & Governance, 15(4), 1009–1019. https://doi.org/10.1111/rego.12392
Teng, H.-W., Härdle, W. K., Osterrieder, J., Baals, L. J., Papavassiliou, V. G., Bolesta, K., Kabasinskas, A., Filipovska, O., Thomaidis, N. S., Moukas, A. I., Goundar, S., Nasir, J. A., Weinberg, A. I., Arakelian, V., Anon, C.-O., Akar, M., Kabaklarli, E., Apostol, E.-S., Iannario, M., … Pele, D. T. (2023). Mitigating Digital Asset Risks. SSRN Electronic Journal. https://doi.org/10.2139/ssrn.4594467
Triyanti, N., Handayani, I. G. A. K. R., & Karjoko, L. (2025). Legal Gaps in Personal Data Protection: Reforming Indonesia’s Population Administration Law. Hasanuddin Law Review, 11(1), 132. https://doi.org/10.20956/halrev.v11i1.6177
Truby, J., Brown, R. D., Ibrahim, I. A., & Parellada, O. C. (2022). A Sandbox Approach to Regulating High-Risk Artificial Intelligence Applications. European Journal of Risk Regulation, 13(2), 270–294. https://doi.org/10.1017/err.2021.52
van der Linden, T., & Shirazi, T. (2023). Markets in crypto-assets regulation: Does it provide legal certainty and increase adoption of crypto-assets? Financial Innovation, 9(1), 22. https://doi.org/10.1186/s40854-022-00432-8
Virani, S. S. (2024). Blockchain end user adoption and societal challenges: Exploring privacy, rights, and security dimensions. IET Blockchain, 4(S1), 691–705. https://doi.org/10.1049/blc2.12077
Wong, R. Y., Chong, A., & Aspegren, R. C. (2023). Privacy Legislation as Business Risks: How GDPR and CCPA are Represented in Technology Companies’ Investment Risk Disclosures. Proceedings of the ACM on Human-Computer Interaction, 7(CSCW1), 1–26. https://doi.org/10.1145/3579515
Wylde, V., Rawindaran, N., Lawrence, J., Balasubramanian, R., Prakash, E., Jayal, A., Khan, I., Hewage, C., & Platts, J. (2022). Cybersecurity, Data Privacy and Blockchain: A Review. SN Computer Science, 3(2), 127. https://doi.org/10.1007/s42979-022-01020-4
Legal Materials
Financial Services Authority of Indonesia. (2018a). Financial Services Authority Regulation No. 13/POJK.02/2018 concerning digital financial innovation in the financial services sector.
Financial Services Authority of Indonesia. (2018b). Financial Services Authority Regulation No. 37/POJK.04/2018 concerning equity crowdfunding services.
Financial Services Authority of Indonesia. (2024a). Financial Services Authority Regulation No. 3 of 2024 concerning the implementation of financial sector technology innovation.
Financial Services Authority of Indonesia. (2024b). Financial Services Authority Regulation No. 27 of 2024 concerning the implementation of digital financial asset trading, including crypto assets.
Malaysia. (2007). Capital Markets and Services Act 2007.
Malaysia. (2010). Personal Data Protection Act 2010.
Malaysia. (2024). Personal Data Protection (Amendment) Act 2024.
Republic of Indonesia. (2022). Law No. 27 of 2022 concerning personal data protection.
Republic of Indonesia. (2023). Law No. 4 of 2023 concerning financial sector development and strengthening.
Republic of Indonesia. (2024). Government Regulation No. 49 of 2024 concerning the implementation of financial sector development and strengthening provisions.
Securities Commission Malaysia. (2017). Digital investment management framework.
Securities Commission Malaysia. (2023). Guidelines on technology risk management.
Securities Commission Malaysia. (2024a). Guidelines on digital assets.
Securities Commission Malaysia. (2024b). Guidelines on recognized markets.
Downloads
Published
Issue
Section
License
Copyright (c) 2026 Eni Dasuki Suhardini, Deshinta Arrova Dewi, Dani Durahman, Cecep Soleh Kurniawan, Panji Adam Agus Putra
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
Authors who publish with this journal agree to the following terms:
- Authors retain copyright and grant the journal right of first publication with the work simultaneously licensed under  Creative Commons Attribution-ShareAlike 4.0 International License that allows others to share the work with an acknowledgment of the work's authorship and initial publication in this journal.
- Authors are able to enter into separate, additional contractual arrangements for the non-exclusive distribution of the journal's published version of the work (e.g., post it to an institutional repository or publish it in a book), with an acknowledgment of its initial publication in this journal.
- Authors are permitted and encouraged to post their work online (e.g., in institutional repositories or on their website) prior to and during the submission process, as it can lead to productive exchanges, as well as earlier and greater citation of published work (See The Effect of Open Access).