Turkish Data Protection Board Fines a Private Healthcare Institution for a Mandatory Checkbox

Turkish Personal Data Protection Board (“Board”) evaluated a complaint regarding a private health institution obtaining explicit consent from patients unlawfully, in its decision dated 02.05.2023…


Changes to the Requirements for Registration to VERBIS

Turkish Personal Data Protection Board’s (“Board”) decision dated 06 July 2023 and numbered 2023/1154, that was published on the Official Gazette today, reevaluated “annual financial balance sheet…


Sending Invoices Issued to Third Parties to a Data Subject’s E-Mail Address

The Personal Data Protection Board (“Board”) evaluated a complaint regarding the processing of personal data through sending e-invoices to the e-mail address of a data subject in the decision dated…


Transferring the Health Data of a Data Subject to the Public Institution

The Personal Data Protection Board (“Board”) evaluated a complaint application regarding the transfer of a data subject's health data to a public institution for an administrative lawsuit in its…


Processing of Personal Data of the Child without the Explicit Consent of the Parent

The Personal Data Protection Board (“Board”) evaluated the complaint application regarding the processing of the child's personal data by a data controller marketing company by sending promotional…


Continuing to Process Personal Data of the Employee by the Employer After the Termination of the Employment Contract

The Personal Data Protection Board (“the Board”) evaluated the complaint application about continuing to process the personal data of the data subject by the employer after the termination of the…


Sending Order Information to Erroneous Email Address

The Personal Data Protection Board (“the Board”) evaluated the complaint application regarding sending the order information of a third party from the e-commerce website which is the data controller…


Failure to Provide the Privacy Policy and Explicit Consent Wording for Cookies

The Personal Data Protection Board (“the Board”) evaluated the complaint application regarding the failure of the data controller to provide the privacy policy and explicit consent wording for…


Turkish Data Protection Authority Started Enforcement Against Foreign Controllers

Recently, the Turkish Data Protection Authority (“DPA”) started sending information request letters dated August 15, 2022, to foreign controllers (data controllers located outside Turkey but…


COMMITMENT LETTER APPLICATION FOR TRANSFER OF PERSONAL DATA ABROAD

The conditions of the transfer of personal data abroad are regulated under Turkish Data Protection Law w. no 6698 (“DPL”). One of the conditions is that in the case that one of the conditions of…