On June 26, 2020, the Turkish Data Protection Authority
(“the Authority”) has made a public
announcement on privacy notices.
The announcement relates to the violations of the legislation
and the issues that data controllers should pay particular
attention while fulfilling their obligation to inform via privacy
notices.
Data controllers' obligation to inform means
informing the data subject regarding processed personal data. This
obligation specified in Article 10 of the Law on the Protection of
Personal Data (“the Law”) is one of
the most significant obligations for the data controller.
Obligation to inform is the right for the data subject and the
obligation for the data controller; however, it is not an
obligation subject to the request of the data subject. The data
controller must fulfill its obligation to inform where the data
subject's explicit consent or any other personal data
processing conditions regulated in Article 5 of the Law exist when
processing
