A bank
- Country
- Turkey
- Fine
- 100,000 TRY
- Date
- 2019-09-18
- Sector
- Private Sector
- Articles
- Article 4 and 12 of the DPL
Insufficient technical and organisational measures to ensure information security + Non-compliance with general data processing principles
A complaint was issued to the KVKK regarding unlawful utilisation of personal data. It is stated in the decision that the bank employee has accessed to the personal data of customers and used it out of the scope of the processing. The KVKK has issued a penalty based the lack of technical and organisational measures. Authority: Turkish Data Protection Authority (KVKK)
Source: https://www.kvkk.gov.tr/Icerik/5545/2019-277
Reported by: Mehmet Gün