2022 KVKK & GDPR May Newsletter Headings

2022 KVKK & GDPR May Newsletter Decision Summaries of The Month and News

You can read our KVKK & GDPR Newsletter to access the decisions, released data breach notifications made by the Turkish Personal Data Protection Authority (KVKK) about natural and legal persons, and decisions, announcements issued by the European Data Protection Board (EDPB) and all the other countries in the past month and have further information about the news relating to personal data protection from Türkiye and the world.

  • Arrangement of Attendance List Containing the Personal Data of the Trainees in a Way That Visible to Other Participants in the Training Given by a University
  • Access to the Former Employee’s Corporate E-Mail Account Without Clarification by the Data Controller Employer
  • Processing Personal Data by Sending SMS Including Advertising Content to the Data Subject by the Data Controller Selling Medical Products
  • Unlawful Processing of Personal Data by the Data Controller Company Operating in the E-Commerce Sector Through Cookies Used on the Website/Mobile Applications
  • Processing of the E-Mail Address, Which Is the Personal Data of the Data Subject, by a Human Resources Firm For the Purpose of Sending E-Mails For Advertising and Marketing Purposes
  • Publication of Documents Containing Personal Data of the Data Subject by Data Controller University on Its Website
  • Not Being Informed by the Employer Data Controller Residing Abroad Within the Scope of the Personal Data Processing Activities Carried Out About the Data Subject Employee, the Unlawful Processing of the Personal Data of the Data Subject by the Data Controller in the Period After April 2021
  • Sharing of Personal Data by the Data Controller Bank by Making a Call Over the Phones of the Family of the Data Subject
  • Allegation That Untrue, Dishonorable Television Report Was Made About the Data Subject, by Using the Photographs of the Data Subject Mother and the Child With the Title of Data Subject
  • Unlawfully Obtaining the Criminal Conviction Information of the Data Subject by the Data Controller, Who Is a Lawyer and Submitting It to the Court File
  • Publication of the Personal Data of the Customers for Whom the Data Controller Has Initiated Enforcement Proceedings on a Publicly Accessible Website
  • Failure to Correct the Credit Rating of the Data Subject by the Bank and Sharing Personal Data With Third Parties
  • Unlawful Processing of Personal Data by a Sending SMS by the Bank to the Phone Number of the Data Subject
  • On the Processing of Personal Data by Sending a Lien Notification to the Data Subject Who Is the Debtor’s Relative by the Bank’s Lawyer
  • An Employment Platform Carrying Out Job Search and Recruitment Processes Engaged in Practices Contrary to the Turkish Personal Data Protection Law
  • Draft on the Data Governance Act (“DGA”) Approved by European Council
  • Amendment on the New York Civil Rights Act Entered into Force
  • Icelandic Data Protection Authority Has Decided to Impose an Administrative Fine on Harpa Concert Hall and Conference Centre
  • Dutch Data Protection Authority Has Decided to Impose an Administrative Fine on Ministry of Foreign Affairs
  • Belgium Data Protection Authority Has Decided to Impose an Administrative Fine on Dedalus Biologie
  • Icelandic Data Protection Authority Has Decided to Impose an Administrative Fine on Reykjavík
  • Belgium Data Protection Authority Has Decided to Impose Reprimand on Google LLC
  • Dutch Data Protection Authority Has Decided to Impose an Administrative Fine on Ministry of Finance – Tax Administration
  • The Icelandic Data Protection Authority Has Been Decided to Impose an Administrative Fine on HEI Medical Travel Agency
  • Yıldız Teknoloji Geliştirme Bölgesi Teknopark AŞ Data Breach Notification
  • ZkSoftware The Advanced Biometric Solution Elektronik San. ve Tic. Ltd. Şti. Data Breach Notification
  • Baydöner Restoranları A.Ş. Data Breach Notification