Article 18 - Misdemeanours

(1) For the purposes of this Law;

  • a) those who fail to comply with obligation to inform provided for in Article 10 herein shall be required to pay an administrative fine of 5.000 to 100.000 TL,
  • b) those who fail to comply with obligations related to data security provided for in Article 12 herein shall be required to pay an administrative fine of 15.000 to 1.000.000 TL,
  • c) those who fail to comply with the decisions issued by the Board under Article 15 herein shall be required to pay an administrative fine of 25.000 to 1.000.000 TL,
  • ç) those who fail to meet the obligations for enrolling in the Registry of Data Controllers and making a notification as provided for in Article 16 herein shall be required to pay an administrative fine of 20.000 to 1.000.000 TL.

(2) The administrative fines listed in this Article shall be applicable to natural persons and private law legal persons who are controllers.

(3) Should the acts listed in the first paragraph be committed within the public institutions and organizations as well as professional associations having the status of public institution, disciplinary procedures shall be applied to the civil servants and other public officers employed in the relevant public institutions and organisations and those employed in the professional associations having the status of public institution upon a notice by the Board and the result is communicated to the Board.