Processing of Personal Data of the Child without the Explicit Consent of the Parent

The Personal Data Protection Board (“Board”) evaluated the complaint application regarding the processing of the child's personal data by a data controller marketing company by sending promotional…


Transferring Personal Data Abroad Without Obtaining Explicit Consent

The Personal Data Protection Board (“the Board”) evaluated the complaint application regarding the transferring of personal data without explicit consent by a bank to an insurance company in its…


Continuing to Process Personal Data of the Employee by the Employer After the Termination of the Employment Contract

The Personal Data Protection Board (“the Board”) evaluated the complaint application about continuing to process the personal data of the data subject by the employer after the termination of the…


Transferring Personal Data Abroad Without Obtaining Explicit Consent

The Personal Data Protection Board (“the Board”) evaluated the complaint application regarding transferring personal data of the data subject abroad without explicit consent by a technology company…


Sharing the Photos Taken During Surgery

The Personal Data Protection Board (“the Board”) evaluated the complaint application about sharing the photos taken during surgery of the data subject and published on the social media account by a…


Administrative Fines to be Imposed in 2023 under the Personal Data Protection Law

Administrative fines to be imposed in case of violation of the Law on Protection of Personal Data No. 6698 (“DPL”) are regulated in Article 18, titled “Misdemeanors”, of the DPL. Within the scope of…


Turkish DPA’s WhatsApp Decision

On 03.09.2021 the Turkish Data Protection Authority (“DPA”), made a public announcement regarding the ex officio investigation of WhatsApp LLC (“Controller”) and published an important decision…