Resolution of Data Protection Board Numbered 2018/63 Has Been Published 9 July 2018

The resolution numbered 2018/63 and dated 31/05/2018 regarding the evaluation of processing the personal data beyond authority and purpose of the personnel who have access to personal data within the scope of the data controller has been published in the website of Data Protection Authority (“Authority”) on the date of 04.07.2018.

It has been decided to take such resolution within the scope of the warnings and complaints made to the Authority about that the personal data are processed by the personnel, who have access to personal data due to their position or duty, beyond their authority and purpose of the processing. Since the actions subject to the warnings and complaints will constitutes the Paragraph 1 of Article 12 of the Law on Protection of Personal Data numbered 6698 (“the Law“), it has been aimed with such Resolution to inform data controllers that its necessary to technical and administrative precautions should be taken to ensure the appropriate level of data security by data controllers in order to prevent actions within this contexts.

The abovementioned resolution has been published in the Official Gazette dated 04.07.2018 and numbered 30468.