Skip to content
INPLP — International Network of Privacy Law Professionals
Member log in

707 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

707 articles

Judicial remedy against decisions issued by Turkish data protection board

Under the Personal Data Protection Law No. 6698 Article 18 ("DPL") the Personal Data Protection Board (“Board”) has the authority to impose administrative fines on data controllers due to failure to comply with their various obligations regulated under the DPL, i.e. failure to comply with the obligation to inform data subjects, obligations related to data security, the decisions issued by the Board and registration and notification obligations to the Data Controllers’ Registry. However, there is no explicit provision under the DPL about the competent courts for judicial review of decisions of the Board imposing administrative fines which creates confusion and dissatisfaction in practice with regard to the judicial remedies to be followed.

19 October 2020

GDPR versus ISO 27701

Although some jurisdiction such as EU's GDPR provide a mechanism for an organization to demonstrate its compliance to GDPR (Article 42 and 43), assessment programs representing this mechanism is not yet available. On the other hand, businesses would like to have confidence that their service providers are managing their privacy issues. Implementation of a Privacy Information Management System (PIMS) or certification to ISO/IEC 27701 is currently a good solution for a data controller to demonstrate to its directors and customers, and for a data processor to demonstrate to its customers that they are managing the issues.

1 October 2020

Judicial remedy against decisions issued by Turkish data protection board

Under the Personal Data Protection Law No. 6698 Article 18 ("DPL") the Personal Data Protection Board (“Board”) has the authority to impose administrative fines on data controllers due to failure to comply with their various obligations regulated under the DPL, i.e. failure to comply with the obligation to inform data subjects, obligations related to data security, the decisions issued by the Board and registration and notification obligations to the Data Controllers’ Registry. However, there is no explicit provision under the DPL about the competent courts for judicial review of decisions of the Board imposing administrative fines which creates confusion and dissatisfaction in practice with regard to the judicial remedies to be followed.

14 September 2020

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership