Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 04 MAY 2022

The Personal Data Protection Board Issued A Decision Regarding The Data Breach Notification Made By Yemek Sepeti

Moroglu Arseven
Moroglu Arseven
Contributor
Moroglu Arseven

Moroglu Arseven

Celebrating its 25th year, Moroğlu Arseven is an independent, full-service Turkish law firm...

View firm profile
Explore more from Moroglu Arseven

Following the data breach notification made by Yemek Sepeti that the web servers were accessed, the Personal Data Protection Authority ruled the second highest administrative fine it had ever imposed.

TurkeyPrivacy
Moroğlu Arseven
Moroğlu Arseven
Author LinkedIn connections

Following the data breach notification made by Yemek Sepeti that the web servers were accessed, the Personal Data Protection Authority ruled the second highest administrative fine it had ever imposed.

  • The following statements are included in the data breach notification submitted to the Personal Data Protection Auhority ("Authority") by the data controller, Yemek Sepeti Elektronik İletişim Perakende Gıda Lojistik A.Ş. ("Yemeksepeti");
    • A web application server belonging to the data controller was accessed by an unidentified person/persons on 18 March 2021,
    • Under normal circumstances, there is a problem record on the vehicle that gives a warning when there is an unauthorized access, but due to a malfunction, the unauthorized access could not be noticed at that moment,

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

KVKK Yurt Dışı Veri Aktarım Rehberi

6698 sayılı Kişisel Verilerin Korunması Kanunu’nun (“KVKK”) 9 uncu maddesi kapsamında kişisel verilerin yurtdışına aktarımlarının uygulanması ile Kişisel Verileri Koruma Kurulu’nun (“Kurul”) beklediği uygun güvenceler hakkında kamuoyunun aydınlatılması amacıyla Kişisel Verileri Koruma Kurumu (“Kurum”) tarafından 2 Ocak 2025 tarihinde Kişisel Verilerin Yurt Dışına Aktarılması Rehberi (“Rehber”) yayımlanmıştır.
TurkeyPrivacy
Barlas & Karabucak Law Firm
Barlas & Karabucak Law Firm
Article

Data Protection And Privacy Law In Türkiye Key Developments And Predictions - 2026

This comprehensive report examines the evolving landscape of personal data protection in Türkiye, analyzing regulatory developments, enforcement trends, and emerging compliance challenges through 2025 and into the first half of 2026. The analysis covers the Turkish Personal Data Protection Authority's expanding guidance framework, significant enforcement actions totaling TRY 352.5 million in fines, and critical regulatory shifts including new cybersecurity legislation and constitutional court decisions
TurkeyPrivacy
Gün + Partners
Gün + Partners
Article

Commitments And Changing Market Conditions: The Yemeksepeti Case

The Turkish Competition Board has partially lifted commitments previously imposed on Yemeksepeti, finding that the online food delivery market has evolved from a near-monopoly to a competitive multi-player environment. This decision examines how binding commitments may be reassessed when market conditions materially change, and explores the treatment of most-favoured-nation clauses under both antitrust and abuse of dominance provisions.
TurkeyAntitrust/Competition Law
Moroglu Arseven
Moroglu Arseven
Article

New Rules For Social Networks And Game Platforms In Türkiye

Turkey's amended Law No. 5651 introduces comprehensive regulatory obligations for social network providers and gaming platforms, establishing age verification requirements, parental controls, and content moderation standards. The legislation, effective November 2026, creates a graduated enforcement framework with administrative fines reaching up to 3% of global turnover and potential bandwidth restrictions for non-compliant platforms.
TurkeyMedia, Telecoms, IT, Entertainment
Moroglu Arseven
Moroglu Arseven
Article

CMB Updates Share Ownership Disclosure And Free Float Rules

The Capital Markets Board of Türkiye has introduced significant changes to share ownership disclosure requirements and free float calculations for companies listed on Borsa İstanbul. The new regulations lower the minimum disclosure threshold from 5% to 3% and establish updated rules for how repurchased shares and indirect shareholdings affect free float calculations. These changes have important implications for direct shareholders, persons acting in concert, and those with indirect ownership stru
TurkeyFinance and Banking
Moroglu Arseven
Moroglu Arseven
Article

New Regulation On Plant Quarantine Was Published

Turkey's new Plant Quarantine Regulation introduces comprehensive digital transformation through the BKKTS system, eliminating wet signatures for entry, exit, and transit procedures. The regulation establishes stricter controls for high-risk products, mandates electronic plant health certificates with QR codes, and implements a three-stage official control process to prevent contamination from harmful organisms.
TurkeyEnvironment
Moroglu Arseven
Moroglu Arseven