GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

Unknown

Country
Turkey
Fine
Unknown
Date
2018-08-02
Sector
Technical Sector
Articles
Art. 4, 5(2) and 12 of the DPL

Insufficient technical and organisational measures to ensure information security

A Data Controller has imposed the explicit consent as a condition of the agreement due to membership and the service. The Authority found the Data Controller in breach with the principle of being bounded and limited by law and good faith when processing the data, and deemed it abuse of right. Authority: Turkish Data Protection Authority (KVKK)