The Turkish Personal Data Protection Board published five decision summaries to the website of the country’s data protection authority. One of the decisions involved an individual who received electronic communications without offering consent. After the board examined the case, it decided to issue a fine of TL 50,000 to the data controller for its failure to take the proper measures to prevent unlawful access and processing of personal information. The board also ruled on cases that involved the processing of biometric data by fitness centers, the use of private email services for corporate purposes, spamming text messages to an individual’s phone without consent, and a case in which a lawyer sent a text message that contained the personal information of a third party.
Full Story