The principle decision of the Personal Data Protection Authority
("the Authority") dated 18.09.2019 and numbered 2019/308
has been published on the website of the Authority, and the
Official Gazette dated 21.11.2019 and numbered 30955.
The decision regarding the unlawful processing of personal data
using the software, programs, and applications by certain
institutes and organizations.
In the case, it is stated that the Authority has received
various complaints that certain profession groups, law firms and
some individuals and organizations operating in finance, real
estate consultancy, insurance, and similar sectors have processed
personal data unlawfully. Further, it has been determined that
certain software, programs, and applications were being used that
allow for those parties to search and process personal data, which
is not obtained legally, of individuals such as the identity and
contact information. This situation was found to be contrary to the
data
