GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

Bank

Country
Turkey
Fine
100,000 TRY
Date
2019-11-26
Sector
Private Sector
Articles
Article 12 and 18(1) (b)

Illegal use of customer data

There was illegal used of bank customers' data through the illegal access and use of its employees, and the DPA held that the bank has not taken adequate measures to protect personal data and also was in breach of its notification obligation. Authority: Turkish Data Protection Authority (KVKK)