Turkish Personal Data Protection Board Fines an Internet Service Provider for Credit Card Exposure
Turkish Personal Data Protection Board (“Board”), with its decision numbered 2020/213 and dated March 12, 2020 (“Decision No. 2020/213”), has fined an internet service provider data controller for failing to take necessary technical and administrative measures to ensure data security in compliance with the Article 12(1) of the Law on the Protection of Personal Data No. 6698 (“Law No. 6698”) upon the internet service provider’s notification of personal data breach to the Board.

