May 2024 – In April, the Turkish data protection authority (“DPA”) held a number of events, announced an international cooperation agreement, and announced five data breach notifications.
DPA’s agenda in April
Data Protection Day conference
On 7 April, an event was organised within the DPA to mark Data Protection Day. Co-hosted with Ankara University, the event highlighted the importance of protecting personal data and how technological advances have increased individuals' expectations of privacy.
Cooperation protocol signed with Northern Cyprus
On 18 April, a Cooperation Protocol was signed between the DPA and the data protection authority of the Turkish Republic of Northern Cyprus. The protocol aims to facilitate cooperation and exchange of information in order to more comprehensively protect human rights and freedoms in the field of personal data protection.
Panel held on amendments to the DP Law
On 24 April, the DPA organised a panel on the amendments to the Turkish Personal Data Protection Law, officially published on 12 March 2024. During the panel, the president of the DPA emphasised that these amendments should not be interpreted as allowing “unlimited data processing” or “unregulated cross-border data transfers”. As a result, all data controllers and data processors should review their practice and make necessary adjustments in accordance with these amendments.
Data Protection in Schools project launched
On 25 April, the DPA announced the launch of the "Data Protection Law in Schools" project in cooperation with the Ministry of National Education. The aim of the project is to create awareness of personal data among school-age youth, raise awareness of online privacy, and share practical information on personal data protection.
The DPA announced the following data breach notifications in April:
|
Data Controller |
Affected Data Subjects |
Affected Personal Data |
Number of Data Subjects |
|
Yamaha Motor Europe N.V. |
Customers and Potential Customers |
Identity, Contact, Customer Transaction Data |
35,988 |
|
TTZ Pazarlama Plastik Sanayi |
Employees, Customers and Potential Customers |
Identity, Contact, Location, Legal Transaction, Personnel Information, Pyhsical Space Data, Customer Transaction Data Transaction Security, Risk Management, Professional Experience, Marketing Data, Audio and Visual Records, Health, Biometric, Appereance Criminal Conviction Data |
N/A |
|
Titiz Plastik Dış Ticaret ve Sanayi |
Employees, Customers and Potential Customers |
Identity, Contact, Location, Legal Transaction, Personnel Information, Pyhsical Space Data, Customer Transaction Data Transaction Security, Risk Management, Professional Experience, Marketing Data, Audio and Visual Records, Health, Biometric, Appereance Criminal Conviction Data |
N/A |
|
SporPark Ayakkabı Teks. ve Spor Malz. Tic. |
Employees, User, Members and Customers |
Identity, Contact, Location, Customer Transaction Data |
N/A |
|
Modaselvim Tekstil San. ve Tic. |
Users, Subscribers/Members and Customers |
Identity and Contact Data |
N/A |