2021 KVKK & GDPR February Newsletter Headings

Decision
Summaries

For Information About the Important Decision Summaries of the Month

Click Here

Information
Guide

For Information About the Information Guide of the Month

Click Here

Legislation
Analysis

For Information About the Legislation Analysis of the Month

Click Here

Have You Completed Your VERBIS Registration?

What is VERBIS?

For Further Information About Data Controllers' Registry Information System

Click Here

2021 KVKK & GDPR February Newsletter Decision Summaries of The Month and News

You can read our KVKK & GDPR Newsletter to access the decisions, released data breach notifications made by the Turkish Personal Data Protection Authority (KVKK) about natural and legal persons, and decisions, announcements issued by the European Data Protection Board (EDPB) and all the other countries in the past month and have further information about the news relating to personal data protection from Türkiye and the world.

  • Summary of the Turkish Personal Data Protection Authority Decision Dated 24.11.2020 and Numbered 2020/905 Regarding the "personal data breach notification of an insurance company"
  • Summary of the Turkish Personal Data Protection Authority Decision Dated 26.12.2019 and numbered 2019/393 Regarding Whether it is Necessary to Get Employees Subject to the Civil Servants Law No. 657 Sign the "Employee Confidentiality Agreement" in the Personal Data Security Guide
  • Summary of the Turkish Personal Data Protection Authority Decision Dated 27.01.2020 and Numbered 2020/59 Regarding the "the claim of the relevant person about the unauthorized and unlawful access gained to their e-mail address they use in the company they are a partner of"
  • Summary of the Turkish Personal Data Protection Authority Decision Dated 27.01.2020 and Numbered 2020/63 Regarding the "processed personal data of the relevant person within the scope of the white code applied in the data controller hospital"
  • Summary of the Turkish Personal Data Protection Authority Decision Dated 08.12.2020 and Numbered 2020/927 Regarding the "request of removal of the search engine results related to the relevant person's name and last name within the scope of the right to be forgotten"
  • The Summary of the Turkish Personal Data Protection Authority Decision Regarding the "clock in/out tracking of the relevant person who works as a civil servant at the municipality performed by the data controller by processing biometric data"
  • Summary of the Turkish Personal Data Protection Authority Decision Dated 27.01.2020 and Numbered 2020/66 Regarding the "processing of the relevant person's contact by an electricity distribution company without basing it on any condition for processing of personal data"
  • Summary of the Turkish Personal Data Protection Authority Decision Dated 30.01.2020 and Numbered 2020/71 Regarding "the issues to be taken into account in the determination of the data controller and the data process or and by whom the disclosure obligation will be fulfilled"
  • The Summary of the Turkish Personal Data Protection Authority Decision Dated 06.02.2020 and Numbered 2020/93 Regarding the "Complaints regarding correction / deletion of past health data"
  • Summary of the Turkish Personal Data Protection Authority Decision Dated 30.10.2019 and Numbered 2019/316 Regarding the "Notice about the deterioration of blood, serum, and tissue samples, which are scientific data and recorded for scientific purposes, due to negligence and the subsequent destruction of them"
  • Summary of the Turkish Personal Data Protection Authority Decision Dated 30.06.2020 and Numbered 2020/508 Regarding the "denouncement applications of some lawyers about attorney inquiry websites"
  • Summary of the Turkish Personal Data Protection Authority Decision Dated 03.09.2020 and Numbered 2020/667 Regarding the "complaint made to the Turkish DPA due to an insurance company conditioning the services it provides to the relevant person to express content"
  • Summary of the Turkish Personal Data Protection Authority Decision Dated 17.09.2020 and Numbered 2020/710 Regarding the "act of sending a notice of levy to the relatives of the relevant person by the Execution Office"
  • Public Announcement (Data Breach Notification) - So CHIC Mağazacılık San. ve Tic. AŞ
  • Children and Social Networks: The Italian Data Protection Authority Requests Information on Processing from Facebook and Instagram
  • The Belgian Data Protection Authority Issued a Fine of €50,000 to a Servicing Firm named Family Service
  • The Polish Data Protection Authority Issued Fine to Smart Cities for Lack of Cooperation with the Personal Data Protection Office
  • The Norwegian Data Protection Authority Issued Fine to Automatic E-mail Forwarding
  • The Norwegian Data Protection Authority Issued Fine to Lindstrand Trading AS
  • The Norwegian Data Protection Authority Issued Fine to Gveik AS
  • The Norwegian Data Protection Authority issued a fine to Cyberbook AS
  • The Norwegian Data Protection Authority Issued Fine to Coop Finnmark
  • The Swedish Data Protection Authority Issues an Administrative Fines for Illegal Use of Face Recognition by Police
  • The Polish Data Protection Authority Issues Fine to the Firm Against Administrative Decision Order
  • The Norwegian Data Protection Authority Issued Reprimand to Telenor for Inadequate Protection of Personal Data
  • Norwegian DPA issued fine to Municipality of Indre Østfold
  • The Spanish Data Protection Authority (AEPD) Issued a Fine of EUR 6.000.000 on CAIXABANK, S.A.
  • The Norwegian Data Protection Authority Issued Fine on Aquateknikk AS