Decision No. 2026/348 of the Personal Data Protection Board dated 18/02/2026

This is a formal decision issued by Turkey's Personal Data Protection Board (KVKK) on 18 February 2026, registered under decision number 2026/348. The KVKK is the supervisory authority responsible for enforcing Law No. 6698 on the Protection of Personal Data (KVKK Law), Turkey's primary data protection legislation aligned with GDPR principles. KVKK Board decisions of this type typically address complaints filed by data subjects, ex officio investigations into data controllers or processors, administrative sanction proceedings, or the issuance of binding guidance on specific data processing activities. The decision number 2026/348 places this among the early decisions of 2026, suggesting it is part of an active enforcement or guidance cycle. Without the full operative text, the specific subject matter—whether a fine, corrective order, data breach response, or sector-specific guidance—cannot be confirmed. However, such decisions are legally binding on the named parties and may set precedent for broader data processing practices in Turkey. Organizations operating in Turkey and processing personal data of Turkish residents should monitor KVKK board decisions for compliance obligations, as violations can result in administrative fines ranging from 26,131 TRY to 2,613,189 TRY (updated annually) or criminal referrals under Turkish Penal Code provisions.

AI-generated summary. May contain errors. Refer to official sources for legal decisions.