Resolution of the Personal Data Protection Board dated 31/05/2018 and numbered 2018/63 on the Unauthorized Processing Activity by Personnel Having Access to Personal Data Held by the Data Controller
| Decision Date | : | 31/05/2018 |
| Decision No | : | 2018/63 |
| Subject | : | Evaluation of the issue where personal data held by the data controller are processed by personnel having access to such data without authorization and for other purposes |
As a result of the evaluation of the notices and complaints submitted to the Authority on the processing of personal data by personnel having access to personal data due to their position or power, the Board unanimously decides that:
- The data controller shall be instructed to take all necessary technical and organizational measures to prevent the unlawful processing of personal data, since processing or/and transfer of personal data to third parties by personnel having access to personal data due to their position or power, by exceeding their power and/or misusing their power, constitutes violation of Article 12(1) of the Personal Data Protection Law No 6698,
- This Resolution issued in accordance with Article 15(6) of the Law shall be published in the Official Gazette and on the website of the Authority.