Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 06 NOVEMBER 2019

Turkey's Data Protection Board Fined Facebook Over Data Breach

Moroglu Arseven
Moroglu Arseven
Contributor
Moroglu Arseven

Moroglu Arseven

Celebrating its 25th year, Moroğlu Arseven is an independent, full-service Turkish law firm...

View firm profile
Explore more from Moroglu Arseven

Facebook representatives informed the Board on 25 September 2018 via e-mail that a data breach was caused by the complex interaction of multiple bugs related to different Facebook features.

TurkeyPrivacy
Moroğlu Arseven
Moroğlu Arseven
Author LinkedIn connections

Turkey's Personal Data Protection Board ("Board") fined Facebook due to failure to take the necessary technical and administrative measures to prevent possible data breaches and to notify the Board of such breach.

Facebook representatives informed the Board on 25 September 2018 via e-mail that a data breach was caused by the complex interaction of multiple bugs related to different Facebook features. However, the breach in question was not duly notified by Facebook to the Board as envisaged under the Turkish Personal Data Protection Law ("Law"). In this respect, the Board started an ex-officio investigation on Facebook in accordance with article 15/1 of the Law. As a result of the investigation, the Board fined Facebook a total of TRY 1,600,000 due to the facts that Facebook did not take the necessary technical and administrative measures to prevent possible data breaches and failed to notify the Board of the breach which was detected on 25 September 2018.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

Turkiye Introduces New Age Verification And Child Protection Requirements For Social Network Providers

On 10 October 2026, the Regulation on the Provision of Differentiated Services for Children and Age Verification by Social Network Providers (the "Regulation") was published in the Official Gazette. Issued by the Cyber Security Presidency, the Regulation introduces mandatory age verification, restrictions on children's access to social networks and additional safeguards for users aged 15 to 17.
TurkeyPrivacy
Balcıoğlu Selçuk Eymirlioğlu Ardıyok Keki Attorney Partnership
Balcıoğlu Selçuk Eymirlioğlu Ardıyok Keki Attorney Partnership
Article

New Regulations For Protecting Children On Social Media In Turkey Minimum Age, Age Verification & Parental Controls

While the widespread use of social media by children offers significant opportunities for communication and access to information, it also presents various risks, including exposure to harmful content, cyberbullying, online exploitation, and threats to the protection of personal data. These risks have increased the importance of legal regulations aimed at protecting children in the digital environment.
TurkeyPrivacy
ADMD/Mavioglu & Alkan Law Office
ADMD/Mavioglu & Alkan Law Office
Article

New Age Verification And Child-Specific Service Obligations Introduced For Social Network Providers

Turkey's new regulation mandates strict age verification and child-specific protections for social media platforms, prohibiting services to users under 15 and requiring segregated, privacy-enhanced accounts for those aged 15-17. Social network providers must implement parental controls, restrict targeted advertising and profiling, and establish transparent appeal mechanisms, with enforcement beginning November 2026.
TurkeyPrivacy
Moroglu Arseven
Moroglu Arseven
Article

Data Protection Law In Turkey (KVKK): Compliance Obligations For Businesses

This article examines Turkey's personal data protection framework under Law No. 6698 from the perspective of companies operating in, selling into or otherwise handling data connected with the Turkish market. It addresses the distinction between data controllers and processors, lawful processing, the information duty, the 2024 reform of special-category data and cross-border transfers, the 2025 VERBIS exemption update, data subject requests, breach response and enforcement.
TurkeyPrivacy
ONGUR & PARTNERS
ONGUR & PARTNERS
Article

KVKK Yurt Dışı Veri Aktarım Rehberi

6698 sayılı Kişisel Verilerin Korunması Kanunu’nun (“KVKK”) 9 uncu maddesi kapsamında kişisel verilerin yurtdışına aktarımlarının uygulanması ile Kişisel Verileri Koruma Kurulu’nun (“Kurul”) beklediği uygun güvenceler hakkında kamuoyunun aydınlatılması amacıyla Kişisel Verileri Koruma Kurumu (“Kurum”) tarafından 2 Ocak 2025 tarihinde Kişisel Verilerin Yurt Dışına Aktarılması Rehberi (“Rehber”) yayımlanmıştır.
TurkeyPrivacy
Barlas & Karabucak Law Firm
Barlas & Karabucak Law Firm
Article

New Age Verification And Child-Specific Service Obligations Introduced For Social Network Providers

Turkey's new regulation mandates strict age verification and child-specific protections for social media platforms, prohibiting services to users under 15 and requiring segregated, privacy-enhanced accounts for those aged 15-17. Social network providers must implement parental controls, restrict targeted advertising and profiling, and establish transparent appeal mechanisms, with enforcement beginning November 2026.
TurkeyPrivacy
Moroglu Arseven
Moroglu Arseven
Article

New Rules For Social Networks And Game Platforms In Türkiye

Turkey's amended Law No. 5651 introduces comprehensive regulatory obligations for social network providers and gaming platforms, establishing age verification requirements, parental controls, and content moderation standards. The legislation, effective November 2026, creates a graduated enforcement framework with administrative fines reaching up to 3% of global turnover and potential bandwidth restrictions for non-compliant platforms.
TurkeyMedia, Telecoms, IT, Entertainment
Moroglu Arseven
Moroglu Arseven
Article

Commitments And Changing Market Conditions: The Yemeksepeti Case

The Turkish Competition Board has partially lifted commitments previously imposed on Yemeksepeti, finding that the online food delivery market has evolved from a near-monopoly to a competitive multi-player environment. This decision examines how binding commitments may be reassessed when market conditions materially change, and explores the treatment of most-favoured-nation clauses under both antitrust and abuse of dominance provisions.
TurkeyAntitrust/Competition Law
Moroglu Arseven
Moroglu Arseven
Article

CMB Updates Share Ownership Disclosure And Free Float Rules

The Capital Markets Board of Türkiye has introduced significant changes to share ownership disclosure requirements and free float calculations for companies listed on Borsa İstanbul. The new regulations lower the minimum disclosure threshold from 5% to 3% and establish updated rules for how repurchased shares and indirect shareholdings affect free float calculations. These changes have important implications for direct shareholders, persons acting in concert, and those with indirect ownership stru
TurkeyFinance and Banking
Moroglu Arseven
Moroglu Arseven
Article

New Regulation On Plant Quarantine Was Published

Turkey's new Plant Quarantine Regulation introduces comprehensive digital transformation through the BKKTS system, eliminating wet signatures for entry, exit, and transit procedures. The regulation establishes stricter controls for high-risk products, mandates electronic plant health certificates with QR codes, and implements a three-stage official control process to prevent contamination from harmful organisms.
TurkeyEnvironment
Moroglu Arseven
Moroglu Arseven