Administrative Fines to be Imposed in 2023 under the Personal Data Protection Law

Administrative fines to be imposed in case of violation of the Law on Protection of Personal Data No. 6698 (“DPL”) are regulated in Article 18, titled “Misdemeanors”, of the DPL. Within the scope of this article, those who do not fulfill the following obligations may be subject to administrative fines ordered by the Personal Data Protection Board (“Board”):

• the obligation to inform provided for in Article 10,
• the obligations related to data security provided for in Article 12,
• the decisions issued by the Board pursuant to Article 15,
• act contrary to the obligations for registry with the Data Controllers’ Registry and for notification provided for in Article 16.

Although the amounts of administrative fines that would be imposed to each case is subject to the discretion of the Board, the lower and upper limits are determined by the DPL and these amounts are updated with the re-valuation rate every year.

On 17.01.2023, an announcement regarding the amounts of administrative fines’ lower and upper limits that will be imposed for 2023 was published by the Personal Data Protection Authority in line with the re-valuation rate. You can find the table regarding the amounts of administrative fines in the announcement below.

For the full text of the announcement: https://www.kvkk.gov.tr/Icerik/7530/6698-Sayili-Kisisel-Verilerin-Korunmasi-Kanunu-Kapsaminda-Idari-Para-Cezasi-Tutarlari

Authors: Burak Özdağıstanli, Ebru Gümüş