Companies Can Now Be Remotely Identified in Their Banking Transactions

On 11 August 2023, the Communiqué Amending the Financial Crimes Investigation Board General Communique (“Communiqué”) was published by the Ministry of Treasury and Finance on the Official Gazette…


Turkish Data Protection Board Fines a Private Healthcare Institution for a Mandatory Checkbox

Turkish Personal Data Protection Board (“Board”) evaluated a complaint regarding a private health institution obtaining explicit consent from patients unlawfully, in its decision dated 02.05.2023…


Turkish Data Protection Board Fines a Private Hospital for Making Videos about Patients’ Treatments

Turkish Personal Data Protection Board (“Board”) evaluated a notice regarding a private hospital obtaining explicit consent from patients for processing personal data, including health data, within…


A Fitness Center Processing Data Subject’s Blood Type

The Personal Data Protection Board (“Board”) evaluated a complaint regarding the processing of blood type information - which falls under the scope of the special categories of personal data -…


VERBIS'e Kayıt Şartlarında Değişiklik

Bugün Resmi Gazete’de yayımlanan Kişisel Verileri Koruma Kurulu’nun (“Kurul”) 06 Temmuz 2023 tarihli ve 2023/1154 sayılı kararıyla Veri Sorumluları Sicili’ne (“VERBİS”) kayıt yükümlülüğüne istisna…


Changes to the Requirements for Registration to VERBIS

Turkish Personal Data Protection Board’s (“Board”) decision dated 06 July 2023 and numbered 2023/1154, that was published on the Official Gazette today, reevaluated “annual financial balance sheet…


Sending Invoices Issued to Third Parties to a Data Subject’s E-Mail Address

The Personal Data Protection Board (“Board”) evaluated a complaint regarding the processing of personal data through sending e-invoices to the e-mail address of a data subject in the decision dated…


Sending SMS for Marketing Purposes Without Explicit Consent

The Personal Data Protection Board (“Board”) evaluated a complaint regarding the processing of personal data by sending text messages for marketing purposes without explicit consent in its decision…


Sending Commercial Electronic Message Without Obtaining Consent

The Personal Data Protection Board (“Board”) evaluated a complaint regarding a data controller sending commercial electronic message to a data subject's work e-mail address, which was found as a…


Sharing Statements Received from a Data Subject During a Job Interview

The Personal Data Protection Board (“Board”) evaluated a complaint regarding a company sharing the information about a data subject's current employer received in a job interview with the data…