Sevinç Eğitim Kurumları (Education Insitution)
- Country
- Turkey
- Fine
- 50,000 TRY
- Date
- 2019-09-18
- Sector
- Private Sector
- Articles
- Article 3, 5, 12 and 18 of the DPL
Insufficient technical and organisational measures to ensure information security + Failure to comply witj duty of data controller to prevent unlawful data processing
It has been determined after a complaint that an education company has sent multiple SMS to people without any legal basis for such data processing. The KVKK states that such action requires explicit consent and therefore decides to issue a penalty based on failure to comply with the DPL regulations underlining that the institution did also not pay attention to the Communique sent by KVKK. Authority: Turkish Data Protection Authority (KVKK)
Source: https://www.kvkk.gov.tr/Icerik/6558/2019-276
Reported by: Mehmet Gün