Facebook Inc
- Country
- Turkey
- Fine
- 1,600,000 TRY
- Date
- 2019-09-18
- Sector
- Public Sector
- Articles
- Article 12 and 18 of the DPL
Insufficient technical and organisational measures to ensure information security + Failure to notify the DPA within the necessary timelimit
The decision is based on the data breach caused by an error in the "View As" system of Facebook. The data breach has lasted for 14 days and included sensitive personal data. It affected 280.959 people in Turkey. A penalty was issued based on the lack of sufficient technical and organisational measures and failure to notify the DPA in the compulsory deadline. Authority: Turkish Data Protection Authority (KVKK)
Source: https://www.kvkk.gov.tr/Icerik/5534/2019-269
Reported by: Mehmet Gün