GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

Mimar Sinan Üniversitesi

Country
Turkey
Fine
NON
Date
2019-07-01
Sector
Public Sector
Articles
Article 15 and 18 of the DPL

Failure to comply with duties related to ensuring information security + Insufficient legal basis for sensitive data processing

The data controller has published application and exam results on a public page. A data subject has requested from data controller to remove the relevant personal data. The university did not respond to the application. KVKK has ordered the university to conduct a disciplinary proceeding and update the methods used in the publication of such data in a way that complies with the DPL regulations. Authority: Turkish Data Protection Authority (KVKK)