The development of online transportation raises the question about the data processing of online application users. The data is passed on to the driver to run the service. Problems arise when the information is misused in violation of the law by drivers outside the context of providing services. This research aims to discuss online transportation application companies' responsibilities for the unauthorized use of user's data. This research is normative legal research. It uses secondary data. The study found that the application company should be responsible for ensuring the confidentiality of the data. Furthermore, the application company should share responsibility for the misuse of data obtained from the application enterprise.