GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

Public Institution

Country
Turkey
Fine
Instructed the Data Controller
Date
2018-10-16
Sector
Public Sector
Articles
Art. 11, 15, 18 of the DPL

Insufficient fulfilment of data subjects rights

The data subject has made an application to the Data Controller, requesting the Data Controller to delete its personal data. However received no sufficient responses. The Data Controller has been granted a term of 30 days to notify the data subject pertaining to the transactions that will be performed, however it has been detected that the Data Control failed to comply with this obligation. Therefore, the Authority has established administrative transaction against the Data Controller, pursuant to Article 18 of the Law. Authority: Turkish Data Protection Authority (KVKK)