The “Procedures and Principles for the Determination, Prevention and Elimination of Price Squeezing” (“Procedures and Principles”), updated with the Board Decision of the Information Technologies and Communication Authority ("Authority") dated 09.02.2021 and numbered 2021 / DK-SRD / 36, has been approved and published on the official website of the Authority. The said Procedures and Principles will enter into force as of 01.04.2021. The previous “Procedures and Principles Regarding the Determination, Prevention and Elimination of Price Squeezing” (“Old Procedures and Principles”), which entered into force as of 01.07.2014 has been abolished. The content of the said procedures and principles are as follows

The Personal Data Protection Board (“Board”) rendered a decision dated 30.10.2019 and numbered 2019/316 (“Decision”) on the complainant doctor’s (“Complainant”) notice (“Notice”), regarding the data controller Hospital (“Data Controller”) who has recorded the patient records of data subject chronic patients’ (“Data Subjects”) on local computers and hospital data system; stored the blood, serum and tissue samples (“Samples”) taken from the Data Subjects in a proper environment to be used in projects; caused the Samples to spoil as a result of not taking the reasonable care to keep the samples under appropriate conditions; and therefore, the Data Controller did not fulfill its obligations regarding data security in accordance with Article 12 of the Personal Data Protection Law numbered 6698 (“PDP Law”).

The Personal Data Protection Board (“Board”) rendered a decision dated 27.01.2020 and numbered 2020/59 (“Decision”), following the complaint (“Complaint”) of the data subject complainant (“Complainant”) regarding unauthorized and unlawful access to the personal e-mail account (@nameofthecompany.com.tr) which consists personal data and was used within a Limited Liability Company (“Limited Company”) of where the Complainant is a partner; changing access settings of the e-mail; and the rejection of the request by the data controller owner of the IP addresses to which this e-mail is affiliated (“Data Controller”) on deletion and removal of all the data in the e-mail account in question.

The Personal Data Protection Board (“Board”) rendered a decision dated 06.02.2020 and numbered 2020/93 (“Decision”) regarding the complaints (“Complaints”) of the complainant data subjects (“Complainant”) in respect of the rejection of correction or deletion of health reports and psychiatric diagnoses, which were recorded in the past for various reasons and currently causing problems due to inaccuracy, by the data controller Ministry (“Data Controller”).

The Personal Data Protection Board (“Board”) rendered a decision dated 03.09.2020 and numbered 2020/667 (“Decision”) regarding a complaint of the data subject complainant (“Complaint”) for the request of the data controller insurance company (“Data Controller”) to obtain explicit consent for the renewal of the health insurance policy arranged on behalf of their family and thus the proceeding allegedly violates the Personal Data Protection Law numbered 6698 (“PDP Law”).

With the transition of the information and document management in the physical environment to the electronic environment, there has been a need for the verification of the information and documents in the electronic environment. In this context, the Electronic Signature Law (“the Law”) numbered 5070 has entered into force as of 23 July 2004 in order to provide security regarding transactions in the electronic environment.

The objectives for the protection of the personal data are announced through the Announcement Meeting of the Human Rights Action Plan held in Ankara on 02.03.2021 by the Presidency of the Republic of Turkey.

Procedures and principles regarding the turnover loss support to be granted to enterprises operating food and beverage services, due to the coronavirus epidemic, have been determined by the Presidential Decree numbered 3505 ("Decree") published in the Official Gazette dated 06.02.2021 and numbered 31387. Accordingly, the procedures and principles regulated by the Decree are as follows:

Personal Data Protection Board (“Board”) rendered a decision (“Decision”) dated 09.10.2020 and numbered 2020/787 regarding the data breach notification made by a data controller (“Data Controller”) operating in the healthcare sector.