Reconstructing Data Privacy Governance in Islamic Fintech Social Finance in Malaysia and Indonesia through Maqasid al-Shariah

T The rapid expansion of Islamic financial technology (Islamic Fintech) has transformed the administration of Islamic social finance, particularly in the management of zakat, waqf, and sadaqah. Digital platforms have significantly enhanced operational efficiency, transparency, and financial inclusion by facilitating wider participation from donors and improving the distribution of charitable funds. Nevertheless, the increasing reliance on digital technologies has simultaneously intensified concerns regarding the protection of personal data, especially information relating to donors and vulnerable beneficiaries. Existing legal frameworks in Malaysia and Indonesia provide statutory safeguards through the Personal Data Protection Act (PDPA) 2010 (Amendment 2024) and Indonesia's Personal Data Protection Law (Law No. 27 of 2022). However, these regulations primarily emphasise legal compliance while providing limited consideration of Islamic ethical obligations and the higher objectives of Shariah (Maqasid al-Shariah). This conceptual study critically analyses data privacy governance in Islamic Fintech social finance from the perspective of Maqasid al-Shariah. Using qualitative doctrinal and comparative legal analysis, the study examines regulatory provisions alongside Islamic legal principles derived from the Qur'an, Sunnah, classical juristic writings, and contemporary Islamic governance literature. The analysis demonstrates that personal data within Islamic social finance should not merely be regarded as digital assets requiring legal protection but should instead be recognised as Data Stewardship, a sacred trust entrusted to Islamic institutions. Accordingly, protecting personal information represents the fulfilment of several objectives of Maqasid al-Shariah, particularly the preservation of religion (Hifz al-Din), life and dignity (Hifz al-Nafs and Hifz al-'Ird), intellect (Hifz al-'Aql), and wealth (Hifz al-Mal). The study proposes a Maqasid-Based Data Privacy Governance Framework that integrates legal compliance, Islamic ethics, institutional accountability, cybersecurity governance, and public trust into a holistic governance model for Islamic social finance institutions. Unlike conventional privacy frameworks that emphasise regulatory obligations, the proposed framework positions data governance as an act of religious stewardship (amanah) that promotes justice ('adl), public interest (maslahah), transparency, and sustainable digital governance. The proposed framework contributes to the growing discourse on Islamic digital governance and offers practical guidance for policymakers, regulators, zakat institutions, waqf authorities, and Islamic Fintech providers in strengthening public confidence while ensuring that technological innovation remains consistent with the objectives of Maqasid al-Shariah. Perkembangan pesat teknologi kewangan Islam (Islamic Fintech) telah mengubah landskap pentadbiran kewangan sosial Islam, khususnya dalam pengurusan zakat, wakaf dan sedekah. Platform digital telah meningkatkan kecekapan operasi, ketelusan serta keterangkuman kewangan dengan memperluaskan penyertaan penyumbang dan mempertingkatkan keberkesanan agihan dana kebajikan. Walau bagaimanapun, peningkatan penggunaan teknologi digital turut menimbulkan kebimbangan terhadap perlindungan data peribadi, khususnya maklumat berkaitan penyumbang dan golongan penerima manfaat yang terdedah. Kerangka perundangan sedia ada di Malaysia dan Indonesia menyediakan perlindungan statutori melalui Akta Perlindungan Data Peribadi 2010 (Pindaan 2024) dan Undang-Undang Perlindungan Data Peribadi Indonesia (Undang-Undang No. 27 Tahun 2022). Namun demikian, peraturan tersebut lebih menumpukan kepada pematuhan undang-undang berbanding penerapan tanggungjawab etika Islam serta objektif utama Syariah (Maqasid al-Shariah). Kajian konseptual ini menganalisis tadbir urus privasi data dalam Islamic Fintech bagi kewangan sosial Islam berdasarkan perspektif Maqasid al-Shariah. Berdasarkan pendekatan kualitatif melalui analisis doktrinal dan perbandingan perundangan, kajian ini meneliti peruntukan undang-undang bersama prinsip-prinsip Syariah yang bersumberkan al-Quran, al-Sunnah, karya-karya klasik fiqh serta literatur kontemporari berkaitan tadbir urus Islam. Dapatan kajian menunjukkan bahawa data peribadi dalam kewangan sosial Islam tidak seharusnya dilihat semata-mata sebagai aset digital yang memerlukan perlindungan undang-undang, sebaliknya perlu diurus berdasarkan prinsip pengawasan data (data stewardship) sebagai satu amanah yang dipertanggungjawabkan kepada institusi Islam. Justeru, perlindungan data peribadi merupakan manifestasi kepada pemeliharaan beberapa objektif utama Maqasid al-Shariah, khususnya pemeliharaan agama (Hifz al-Din), nyawa dan maruah (Hifz al-Nafs dan Hifz al-'Ird), akal (Hifz al-'Aql) serta harta (Hifz al-Mal). Kajian ini seterusnya mencadangkan Kerangka Tadbir Urus Privasi Data Berasaskan Maqasid (Maqasid-Based Data Privacy Governance Framework) yang mengintegrasikan pematuhan undang-undang, etika Islam, akauntabiliti institusi, tadbir urus keselamatan siber dan kepercayaan awam dalam satu model tadbir urus yang holistik bagi institusi kewangan sosial Islam. Berbeza dengan kerangka privasi data konvensional yang lebih menekankan aspek pematuhan peraturan, kerangka yang dicadangkan meletakkan tadbir urus data sebagai satu bentuk tanggungjawab berasaskan prinsip amanah yang memupuk keadilan ('adl), kemaslahatan (maslahah), ketelusan dan kelestarian tadbir urus digital. Kerangka ini menyumbang kepada perkembangan wacana tadbir urus digital Islam serta menyediakan panduan praktikal kepada penggubal dasar, pihak pengawal selia, institusi zakat, pihak berkuasa wakaf dan penyedia Islamic Fintech dalam memperkukuh keyakinan masyarakat serta memastikan inovasi teknologi sentiasa selari dengan objektif Maqasid al-Shariah.