- Country
- Turkey
- Fine
- 550,000 TRY
- Date
- 2019-04-11
- Sector
- Public Sector
- Articles
- Art. 12 of the DPL
Failure to implement sufficient measures to ensure information security, and to fulfill information obligations
Data breach, which has been on press under the name "Photohraph API" has been announced on 14.12.2018. Facebook has discovered an photograph API error that enabled third parties to access the photos of Facebook users. It has been stated that third parties may have had access to thereof for 12 days. The Authority found Facebook in failure to implement sufficient measures to ensure information security and to fulfil information obligations, since the Authority has not been notified and the individuals were started to be notified on 17.12.2018, although the breach was discovered on 19.09.2019. Authority: Turkish Data Protection Authority (KVKK)
Source: https://www.kvkk.gov.tr/Icerik/5481/2019-104
Reported by: Mehmet Gün