September 2025 – In August 2025, the
Turkish Personal Data Protection Authority (the
'DPA') published one announcement, issued
two global updates bulletins, organised two seminars, and disclosed
two data breach notifications.
DPA Announcement: Unlawful Sharing of Debtors'
Relatives' Contact Information
On 20 August 2025, the DPA published an announcement entitled
"Public Announcement Regarding the Sharing of Debt
Information by Accessing the Telephone Numbers of Relatives of
Individuals Who Owe Money, as Provided by Creditors'
Representatives."
In its announcement, the DPA states that when creditors'
attorneys or representatives access the contact details of
debtors' relatives and disclose debt-related information, such
conduct constitutes a potential violation of Data Protection Law
No.6698 ("DP Law"). Under the DP Law,
personal data may only be processed in accordance with the
conditions prescribed by law or with the explicit consent of the
data subject.
