Personal Data Protection Board

Decision Date :11.04.2019

Decision No:2019/104

As a result of the examination regarding the data breach which occurred before Facebook about a photo API bug which grants permission to third-party apps to access Facebook users photos, the Board decided;

1.to impose an administrative fine of 1.100.000 TL to the Company for not taking necessary technical and organizational measures to ensure data security within scope of the Article 12(1) of the Law.

2.to impose an administrative fine of 550.000 TL to the Company for not notifying the breach to the Board within the shortest time in line with the Article 12(5) of the Law.

Scroll to Top