Turkiye: Issued KVKK ruling in investigation into Social Media Platform X over alleged data security violations

On 14 November 2024, the Personal Data Protection Authority (KVKK) issued a ruling against the social media platform X (formerly Twitter) under the Law on the Protection of Personal Data No. 6698, imposing an administrative fine of TRY 1.47 million. The ruling followed an investigation into the platform’s use of email addresses and phone numbers collected for security purposes in its advertising systems. KVKK determined that this practice violated data protection principles, including the lawful and fair processing of personal data and the requirement to limit data use to its original purpose. It further found that X had failed to implement sufficient technical and administrative measures to ensure data security, leading to the exposure of users' personal data.