The relevant decisions have not yet been published by the Authority, and information is being shared through the news of Anadolu Agency. We will provide an update on the details once the decisions are announced.
Decision on X (formerly Twitter)
According to Anadolu Agency's news dated November 14, 2024, the Authority initiated an ex officio investigation following the statement published on X's website, which stated that "email addresses or phone numbers obtained from users for security and safety purposes were mistakenly used for advertising purposes in their own advertising system."
As a result of the investigation, it was determined that the platform has a high number of users in Türkiye, and the data may have been accessed by third parties, the processing of personal data collected for security purposes for advertising activities violated the principles of "lawfulness and fairness" and "being relevant, limited, and proportionate to the purposes for which they are processed."
In this context, an administrative fine of 1,470,000 TRY was imposed for unlawful data processing and violations of data security provisions under the Personal Data Protection Law.
Source: https://www.aa.com.tr/tr/gundem/kvkkden-sosyal-medya-platformu-xe-1-milyon-470-bin-lira-idari-para-cezasi/3393564#
Decision on Twitch
According to Anadolu Agency's news dated November 16, 2024, the Authority initiated an ex officio investigation following claims of a data leak involving approximately 125 GB of data on Twitch.
As a result of the investigation, it was found that the data controller, Twitch, failed to exercise due care when implementing the necessary configurations to resolve system issues, that security measures which should have been taken before the breach were only implemented after the incident, and that Twitch was inadequate in identifying risks and threats. Additionally, it was noted that the breach affected 35,274 individuals residing in Türkiye.
In this context, the Authority imposed an administrative fine of 1,750,000 TRY for violations of data security provisions under the Personal Data Protection Law and an additional fine of 250,000 TRY for failing to notify the Authority of the data breach.
Source: https://www.aa.com.tr/tr/bilim-teknoloji/kvkkden-sosyal-medya-platformu-twitche-veri-sizintisi-nedeniyle-2-milyon-lira-ceza/3395339
_______________________________
The content in this article is the exclusive property of the attorneys at Nova Law and Consultancy. It may not be used, reproduced, copied, published, distributed, or otherwise disseminated without proper attribution or written consent from the owner.
This content has been prepared solely for general informational purposes and does not constitute legal advice. There is no guarantee that the information provided is current, accurate, or complete. Since each case requires specific evaluation, professional legal advice should be sought before taking any action based on the information contained in this article. For expert support, you can contact us via the information provided on our contact page or through the message box.