The Personal Data Protection Board (“Board”) published the following ten new decision summaries on data controllers operating in several industries, predominantly banking:
- Summary of Decision No. 2020/504: Regarding the request of the relevant person to deliver the call center voice recordings to the petitioner, the Board has decided that it is lawful for the data controller to transmit written transcripts of voice recordings instead of voice recordings in accordance with the relevant Board decision.
- Summary of Decision No. 2021/84: The Board has decided to impose an administrative fine of TRY 125,000 on the data controller who provides fixed telephone service, for using and transferring patient contact addresses provided by a hospital for purposes other than processing.
- Summary of Decision No. 2021/115: The Board has decided to impose an administrative fine of TRY 175,000 on the data controller for registering the phone number of a debtor’s brother as an alternative phone number because the bank had previously contacted by using this phone number.
- Summary of Decision No. 2020/608: The Board found petitioner’s argument for sending a confirmation message to the petitioner due to the fact that the purchaser inadvertently entered the petitioner’s phone number during the purchase of the flight ticket in the non-compulsory paid information part is without merit.
- Summary of Decision No. 2020/507: The Board found petitioner’s argument for refusing the request to transfer the health data of the deceased person to the heirs is without merit, since the health data of the deceased cannot be considered as personal data.
- Summary of Decision No. 2020/494: The Board found it lawful for the employer to present the camera recordings as evidence in the reemployment lawsuit filed by the employee whose employment contract was terminated.
- Summary of Decision No. 2020/118: The Board decided that there was no action to be taken by the data controller bank to respond to the confiscation notice in the process of placing the confiscation of the safe deposit of the relevant person at the bank where the complaint was made.
- Summary of Decision No.2020/120: The Board has found that the processing of bank account movements, deposit information, deposit and withdrawal transactions, which are the personal data of the relevant persons, by the deputy tax inspector without their express consent, has been deemed lawful as it is explicitly stipulated in the law.
- Summary of Decision No.2020/78: The Board has decided that it is unlawful for the data controller Bank to send the personal data on the credit card statement, which is the individual product of the person concerned, to the e-mail address defined on the company of which he / she is the e-statement partner instead of the individual e-mail address and decided to impose an administrative fine of TRY 60,000 on the data controller.
- Summary of Decision No.2020/108: Regarding the determination of the relevant person as a senior manager before the former employer in the announcement made by the new employer after the relevant person starts working with a new employer, The Board has decided that it is lawful for the former employer to contact the new employer in order to correct the said declaration.