Personal Data Protection Board
Decision Date :16.05.2019
Decision No:2019/141
As a result of examination regarding the data breach caused by malware and affected 67.519 people’s information such as identity, contact and process security data in Turkey, the Board decided;
1.to impose an administrative fine of 450.000 TL to the Company for not taking necessary technical and organizational measures to ensure data security within scope of the Article 12(1) of the Law
2.to impose an administrative fine of 100.000 TL to the company for not notifying the breach to the Board within the shortest time in line with the Article 12(5) of the Law.