An asset management company
- Country
- Turkey
- Fine
- 20,000 TRY
- Date
- 2019-05-31
- Sector
- Technical Sector
- Articles
- Article 5,12 and 18 of the T
Insufficient technical and organisational measures to ensure information security + Non-compliance with general data processing principles
The KVKK has determined in its decision that the company has repeatedly sent the same SMS within the scope of the explicit consent to the data subject. It's considered to be non-compliant with the general data processing principles in terms of abuse of rights. That's why the KVKK has issued a penalty based on the lack of technical and organisational measures. Authority: Turkish Data Protection Authority (KVKK)
Source: https://www.kvkk.gov.tr/Icerik/5494/2019-159
Reported by: Mehmet Gün