This qualitative study employs a phenomenological approach. The findings indicate that, in addressing the challenges of consumer protection in the digital age, normative solutions are required that are not merely reactive, but also proactive and adaptable to technological developments. One key step is to amend the Consumer Protection Act to include specific provisions regarding digital transactions, liability mechanisms for online businesses, and the protection of consumers’ personal data. Another solution is the establishment of subsidiary regulations under the Personal Data Protection Act that more specifically govern the collection, storage, and processing of data by e-commerce platforms. This can provide legal safeguards for consumers’ right to privacy, whilst also offering legal certainty for businesses in the conduct of their operations.