The penalties published on the website of the Personal Data Protection Board last week are as follows;
- Marriott International Inc. : About the Company, which does not take the necessary technical, administrative and measures to ensure data security within the framework of paragraph (1) of Article 12 of the Law, Article 18 of the Law no. (1) 1,100,000 TL in accordance with subparagraph (b) of the Article 12 of the Law and the obligation to notify as soon as possible in paragraph (5) of Article 12 of the Law. Administrative fine of 350.000 TL, including a total of 1.450.000 TL,
- Cathay Pacific Airway Limited: About the Company, which has not taken the necessary technical, administrative and measures to ensure data security within the framework of paragraph (1) of Article 12 of the Law, Article 18 of the Law no (1) 450,000 TL in accordance with subparagraph (b) of the Article 12 of the Law, and 100,000 TL in charge of the Company in accordance with subparagraph (b) of paragraph (1) of article 18 of the Law, since it is in violation of the obligation to notify as soon as possible in paragraph (5) of article 12 of the Law. Administrative fine of 550.000 TL in total,
- Clickbus Travel Services Inc. : About the Company that does not take the necessary technical and administrative and measures to ensure data security within the framework of paragraph (1) of Article 12 of the Law, in accordance with subparagraph (b) of paragraph (1) of Article 18 of the Law. TL and a total of 100.000 TL for the Company, pursuant to subparagraph (b) of paragraph (1) of Article 18 of the Law, as it is in violation of the obligation to notify as soon as possible in paragraph (5) of Article 12 of the Law. It was decided to impose an administrative fine of 550,000 TL.
As we always say, compliance with the Personal Data Protection Law does not end with being registered with Verbis. It is time to really take the Technical and Administrative measures specified in the Law, which were thrown into the background by saying that nothing will happen to us.
To request a quotation for the following: Cyber Security, Digital Transformation, MSSP, Penetration Testing, KVKK, GDPR, ISO 27001 and ISO 27701, please click here.