GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

S Şans Oyunları A.Ş

Country
Turkey
Fine
180,000 TRY
Date
2019-08-27
Sector
Public Sector
Articles
Article 12 and 18 of the DPL

Insufficient technical and organisational measures to ensure information security + Failure to notify the data subjects in the shortest time possible

A database was leaked to Internet by mistake from a betting company website. The data breach has not been detected by the company and therefore the number of people affected by it remain unknown. A penalty was issued based on the lack of sufficient technical and organisational measures and failure to notify the affected data subjects in the shortest time possible. Authority: Turkish Data Protection Authority (KVKK)