On 15.12.2020, the European Commission (“Commission”) submitted the proposal of the drafts of the Digital Services Act (“DSA”) and the Digital Markets Act (“DMA”).More specific and additional obligations are imposed on very large online platforms with the DSA. In accordance with the regulations within the scope of the DSA, all online intermediaries offering their services in the single market, regardless of whether they are in the European Union ("EU"), are obliged to comply with the new rules. The DSA also imposes clear obligations on internet operators regarding user complaints against illegal acts.

The Personal Data Protection Board (“Board”), in its Principle Decision dated 22.12.2020 and numbered 2020/966 (“Principle Decision”), envisaged that the data controllers should establish mechanisms enabling them to confirm the contact information of the data subjects in order to prevent the personal data of the data subjects from being sent to third parties through communication channels such as mobile phone or e-mail, as contrary to Articles 4 and 12 of the Personal Data Protection Law numbered 6698 (“PDP Law”).

As a result of the complaint of the data subject complainant, regarding the data controller Bank (“Data Controller”) who did not fulfil its obligation to inform in accordance with Article 11 of the Personal Data Protection Law numbered 6698 (“PDP Law”), the Personal Data Protection Board (“Board”) rendered a decision dated 08.10.2020 and numbered 2020/766 (“Decision Dated 08.10.2020”) regarding the Bank’s failure to comply with the previous Board Decision dated 06.02.2020 and numbered 2020/98 (“Decision Dated 06.02.2020”), which required the correction of the deficiencies in the Bank’s privacy notice.

As a result of the complaint of the data subject complainant (“Compliant”) regarding the data controller Bank (“Data Controller”) who did not fulfil its obligation to inform in accordance with Article 11 of the Personal Data Protection Law numbered 6698 (“PDP Law”),

The application period for short-term employment allowance is extended due to force majeure arising from Covid-19 pandemic. With the Presidential Decision dated 22.12.2020 and numbered 3316 (“Decision no. 3316”), it is decided to extend the application period for short-term

The Personal Data Protection Authority (“Authority”) issued statements through a public announcement published on 16.12.2020 (“Announcement”), regarding personal data of the data subjects made public in accordance with the personal data processing activities. In the Announcement, the Authority stated that making public should be interpreted in a different and narrow manner compared to disclosing personal data to the public; it should be defined as disclosing personal data to the public by the data subject with the intention and purpose to make the personal data public.