Introduction In the information age we live in, with the rapid increase in the development of information technologies, the digitalization and globalization of societies and economies have started to keep up with the technologic developments and resulted in big data, personal data, protection of personal data and privacy to become increasingly important. Technological developments have...
The Central Bank of the Republic of Turkey (“CBRT”) stated that the Guidelines on Associating Business Models Offered in the Payments Area with Payment Service Types (“Guidelines”) aim to associate business models that are frequently encountered in the field of payments with the payment services listed in the Law No. 6493 on “Payment and Securities...
The decision of the Personal Data Protection Board (“Board”) dated 07.07.2022 and numbered 2022/667, regarding processing of the data subject’s ‘hand geometry’ information to access the service building of an enterprise by the data controller company (“Data Controller”) without explicit consent (“Decision”) has been published. In summary, the data subject submitted a complaint to the Personal...
The Regulation on the Consumer Arbitration Committees (“Regulation”) has been published in the Official Gazette dated 21/09/2022 and numbered 31960. The Regulation regulates the procedures and principles regarding the establishment and functioning of consumer arbitration committees and covers the activities and processes of consumer arbitration committees within this scope. With the Regulation, the Regulation on...
The decision of the Personal Data Protection Board (“Board”) dated 17.03.2022 and numbered 2022/243 (“Decision”) regarding processing of personal data by sending the invoice to the data subject, upon the use of the e-mail address of the data subject by a person with the same name when placing an order on the internet, has been...
The decision of the Personal Data Protection Board (“Board”) dated 02.11.2021 and numbered 2021/1104, regarding the allegation that the unlawful processing of personal data by a bank through sending SMS to the mobile phone number of the data subject (“Decision”) has been published. In the complaint submitted to the Personal Data Protection Authority (“Authority”), the data...
The Regulation Amending the Regulation on Distance Contracts (“Regulation”) has been published in the Official Gazette dated 23/08/2022 and numbered 31932. With the Regulation: The term, intermediary service provider was added to the Distance Contracts Regulation, and the definitions of intermediary service provider and platform were included to the Regulation. A provision has been added...
The Draft Guideline on Processing Genetic Data (“Draft Guideline”) has been published on the official website of the Personal Data Protection Authority (“Authority”) on 24.08.2022. Opinions and evaluations regarding the Draft Guideline can be submitted to the Authority in writing and/or by e-mail to the e-mail address of genetikveri@kvkk.gov.tr until 24.09.2022. The concept of genetic...
The Guideline Regarding Good Practices on Protection of Personal Data in the Banking Sector (“Guideline”) has been published on 05.08.2022 by the Personal Data Protection Authority (“Authority”). The purpose of the Guideline is to guide the data controller banks to carry out their personal data processing activities in accordance with the Personal Data Protection Law...
The decision of the Personal Data Protection Board (“Board”) dated 10.02.2022 and numbered 2022/103 (“Decision”) regarding the allegation of sharing the content of the enforcement proceedings file regarding a company in which the name of the data subject is mentioned in the company title, has been published. Within the scope of the complaint subject to...
