What Are The Sanctions For Actions Contrary To The Personal Data Protection Law?
SANCTIONS FOR ACTS CONTRARY TO THE LAW ON THE PROTECTION OF PERSONAL DATA:
Offenses:
The provisions of Articles 135 to 140 of the Turkish Criminal Code No. 5237 shall apply to offenses related to personal data. Those who do not delete or anonymize personal data in violation of Article 7 of the Law shall be punished according to Article 138 of the Law No. 5237.
Misdemeanors:
According to Article 18 of the Law titled “misdemeanors”
a) From 5.000 Turkish Liras to 100.000 Turkish Liras for those who fail to fulfill the disclosure obligation stipulated in Article 10,
b) 15.000 Turkish Liras to 1.000.000 Turkish Liras for those who do not fulfill the obligations regarding data security stipulated in Article 12,
c) 25.000 Turkish Lira to 1.000.000 Turkish Lira for those who fail to fulfill the decisions taken by the Board pursuant to Article 15,
ç) From 20.000 Turkish Liras to 1.000.000.000 Turkish Liras for those who violate the obligation to register and notify the Data Controllers Registry stipulated in Article 16,
administrative fine is imposed. The administrative fines stipulated in this Article shall be imposed on natural persons and private legal entities who are data controllers.
(3) In the event that the acts listed in the first paragraph are committed within public institutions and organizations and professional organizations in the nature of public institutions, upon the notification to be made by the Board, action shall be taken against the civil servants and other public officials working in the relevant public institutions and organizations and those working in professional organizations in the nature of public institutions in accordance with the disciplinary provisions and the result shall be notified to the Board.