Share on LinkedInShare on LinkedIn

ARTICLE · 02 FEBRUARY 2022

The Turkish Data Protection Board's New Principle Decision On Blacklisting Practices And The Concept Of Joint Controllers

CBC Law
CBC Law
Contributor
CBC Law

CBC Law

CBC Law is an independent, full-service law firm serving local and international clients. With...

View firm profile
Explore more from CBC Law

On 20 January 2022, the Turkish Data Protection Authority ("Authority") published a principal decision ("Decision") in the Official Gazette regarding blacklisting practices in the car rental industry.

TurkeyPrivacy

On 20 January 2022, the Turkish Data Protection Authority ("Authority") published a principal decision ("Decision") in the Official Gazette regarding blacklisting practices in the car rental industry. The Decision introduced the concept of the joint controller by defining that both car rental companies and car rental software companies function as data controllers in blacklisting practices.

How Does the Blacklist Practice Work?

In its Decision, the Authority determined that software development companies provide car rental companies with software that allows them to create blacklists containing comprehensive information about natural person customers for use in future rentals. According to the Decision, these blacklists include records such as accidents, damage to the vehicle, and payment problems during the use of the vehicle.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

See more popular content from