Board Decision No. 2019/269 on Facebook

Board Decision No. 2019/269 on Facebook

Turkish Personal Data Protection Board Decision Summary on Facebook No. 2019/269 of 18/09/2019

As a result of the examination regarding the data breach occurred in consequence of the vulnerability which arose from the interaction of three distinct features of Facebook system such as “View as”, “Birthday Celebrator” and “Video Uploader”, the Board decided;

1. to impose an administrative fine of 1.150.000 TL to the Company for not taking necessary technical and organizational measures to ensure data security within scope of the Article 12(1) of the Law.
2. to impose an administrative fine of 450.000 TL to the Company for not notifying the breach to the Board within the shortest time in line with the Article 12(5) of the Law.