Under the Law, the Board has the authority to impose administrative sanctions. It is stipulated that the Board may impose administrative fines for failure to comply with the duty to provide information, obligations relating to data security, failure to comply with decisions issued by the Board, breaches of registration and notification obligations under the Register of Data Controllers, or breaches of the notification obligation regarding standard contracts. In addition to imposing administrative fines, the Board may also issue decisions of an administrative nature, such as ordering the data controller to remedy the breach or ordering the suspension of data processing and transfer.
Authors:
Begüm Yavuzdoğan Okumuş, Partner
begum.yavuzdogan@gun.av.tr
Uğur Erkırlı, Senior Associate