Share on LinkedInShare on LinkedIn

ARTICLE · 09 JULY 2026

Turkish DPA’s Principle Decision On Personal Data Of Accident Victims: Key Implications For The Insurance Sector

The Turkish Personal Data Protection Authority has issued a principle decision addressing unlawful access to personal data of accident victims, particularly in road traffic cases. This decision establishes critical data security obligations for insurance companies, adjusters, and claims handlers, emphasizing the need for robust technical and organizational measures to prevent unauthorized access and disclosure of sensitive information processed during post-accident claims handling.

TurkeyPrivacy

July 2026 – In its Principle Decision published in the Official Gazette on 1 July 2026, the Turkish Personal Data Protection Authority (“Turkish DPA”) addresses the unlawful access to and the use of personal data relating to accident victims, particularly those involved in road traffic accidents.

Although the Decision was prompted by complaints regarding compensation consultancy firms, its implications extend beyond those entities. In its Decision, the Turkish DPA reiterates the data security obligations of insurance companies, insurance adjusters, and other stakeholders involved in claims handling.

Background

The Turkish DPA notes that it has received numerous complaints from individuals who were contacted by telephone immediately after being involved in road traffic accidents. In many cases, callers claimed to represent lawyers or compensation consultancy firms, offered assistance in pursuing compensation claims, and appeared to possess detailed information about accidents that

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See more popular content from