Turkish Data Protection Regulation Update By Regulatory Authority: Technical And Administrative Measures To Be Taken

On February 15, the public announcement of the Personal Data Protection Board (the "Board") regarding the Technical and Administrative Measures Recommended to be Taken by Data Controllers Regarding User Security was published.

In the aforementioned announcement, when the data breach notifications that have recently been submitted to the Personal Data Protection Board are evaluated; It has been observed that the user account information used to log in to the websites of data controllers operating in various sectors such as finance, e-commerce, social media and gaming is publicly published on some websites. It has been stated by the Board that it has been determined that the said data controllers, who obtained the aforementioned user accounts, actively access the websites without the knowledge of the users, and that the data of the relevant persons can be viewed within this scope.