The Personal Data Protection Board issued a principle decision regarding individuals and institutions using various programs/software/applications that allow questioning personal data.
The principle decision of Personal Data Protection Board ("Board") dated 18/10/2019 and numbered 2019/308 ("Decision") regarding individuals and institutions using various programs/software/applications, which allow questioning personal data of citizens such as identity and contact information, has been published on the Official Gazette dated November 21, 2019.
The Board, in its review conducted upon the notifications made to the Personal Data Protection Authority, determined that certain attorneys/law firms, individuals and organizations operating in sectors such as finance, real estate consultancy, insurance etc. use software/applications/programs, which allow them to question personal data, through data obtained in various ways.
The Board, in its Decision, pointed out that use of such software/applications/programs constitute a contradiction with Article 12 of the Personal Data Protection Law No. 6698 ("Law") regulating data security obligations.
According to the Decision, these individuals and institutions detected to be using previously mentioned software/programs/applications will be subject to procedural actions under Turkish Criminal Law; and administrative sanctions will be applied on the data controllers in line with Article 18 of the Law.
You may reach full text of the decision via the link below:
https://www.resmigazete.gov.tr/eskiler/2019/11/20191121-7.htm
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.
