24 Dec 2021
The Personal Data Protection Board issued its decision dated 20 January 2020 and numbered 2020/50 regarding the personal data breach notification of an apparel firm, on its official website. The Board found it acceptable that the data controller residing […]
17 Aug 2021
The following are summaries of ten recent decisions of the Personal Data Protection Board (“Board”). Decision No. 2020/216: Regarding a cyber-attack in data controller’s systems, the Board determined the following facts: (i) the data controller could not clearly determine […]
2 Jun 2021
1. LEGISLATION | NOTABLE CASE LAW 1.1. List any specific whistleblowing legislation No specific whistleblowing legislation exists in Turkey. However, certain provisions in various laws and sub-legislation applies to whistleblowing including those listed below in 1.3. European Union’s adoption […]
24 May 2021
INTRODUCTION Turkey’s first legislation addressing personal data protection was enacted on April 4th, 2016. Turkish Data Protection Law numbered 6698 (“DP Law”) outlines a similar framework to the European Data Protection Directive 95/46/EC and the secondary legislation in the […]
23 Apr 2021
Children, due to their limited life experience and propensity for risk taking relative to adults, are generally considered particularly vulnerable to online personal data intrusions and theft. Data from the National Center for Education Statistics of the United States […]
15 Apr 2021
The Personal Data Protection Board (“Board”) published the following nine new decision summaries on data controllers operating in several industries: (i) Summary of Decision No. 2021/111: Regarding the contact with the relatives of the debtor concerning the debt, the […]
15 Apr 2021
The Personal Data Protection Board (“Board”) published the following ten new decision summaries on data controllers operating in several industries, predominantly banking: Summary of Decision No. 2020/504: Regarding the request of the relevant person to deliver the call center […]
16 Mar 2021
The Personal Data Protection Board (“Board”), issued a decision, dated 3 September 2020, and numbered 2020/667, in response to a petition alleging that an insurance company’s explicit consent requirement for policy renewal was unlawful. The Board found the insurance […]
10 Feb 2021
The Personal Data Protection Board (“Board”) has published its first decision where it does not impose any sanctions on the data controller who took all necessary technical and administrative measures after the data breach. The data breach subject to […]
28 Jan 2021
Almost five years passed since the enactment of Personal Data Protection Law No. 6698, whilst much of what were once considered standard business practices in Turkey have become obsolete, if not unlawful. Organizations are now required to implement within […]
