Turkiye: Issued KVKK ruling against data controllers for non-compliance with registration requirements under Personal Data Protection Law

On 1 August 2024, the Turkish Data Protection Authority (KVKK) issued a ruling with a fine of around TL 503 million against 16’350 data controllers for non-compliance with registration requirements under the Personal Data Protection Law of Turkey. The ruling notes that real and legal persons involved in processing data must register with and notify the Data Controllers Registry before processing data as mandated by Article 16 of the Law on the Protection of Personal Data. The ruling also stated that disciplinary measures have been imposed on relevant public institutions and organisations.