Noteworthy Data Protection Regulations in Turkey and Around the World
A data breach notification has been published on the website of the Personal Data Protection Authority ("Authority") by Karel İletişim Hizmetleri A.Ş., Public Library of Science ("PLOS"), and Dirk Rossmann Mağazacılık Ltd. Şti.
The Authority has published a "Notice on the Condition for Personal Data Processing Foreseen by Laws."
In the context of election activities, the Authority has published the "Guide on Protection of Personal Data in Election Activities" to remind public administrations, political parties, candidates, and voters of their rights and obligations.
In order to better understand the technology of "Deepfake" (deep synthesis or deep fake), which is formed from the words deep learning and fake, the Authority has published a "Deepfake Information Note."
A data controller's application for a commitment letter regarding the transfer of personal data abroad has been accepted.
The Authority published a "Guide on the Processing of Turkish Republic (T.C.) Identity Numbers" regarding the issues to be considered when processing T.C. identity numbers, as they can provide access to other personal data of the individual by their nature, which could lead to victimization if obtained by others.
According to a report by the Washington Post, American Express informed the Massachusetts Office of Consumer Affairs and Business Regulation about a data breach. American Express stated that, following a data breach at a third-party company, the names, account numbers, and card details of an undisclosed number of customers were exposed.
According to a report by EdScoop, surveillance tools aimed at increasing security in schools are raising privacy concerns among those advocating for the confidentiality of student data. Advocates warning that the technology could harm students with racial bias issues, stress that schools seeking to enhance surveillance should be cautious of companies employing "deceptive marketing practices."
According to CBC News, the Supreme Court of Canada ruled that an IP address is "subject to a reasonable expectation of privacy" and stated that law enforcement must have a search warrant to obtain an IP address.
Italy's data protection authority, Garante, has determined that OpenAI's artificial intelligence chatbot ChatGPT violated several provisions of the EU General Data Protection Regulation (GDPR) following an information-gathering investigation. OpenAI has 30 days to present its counterarguments.
As of March 2024, the 6 gatekeepers (Apple, Alphabet, Meta, Amazon, Microsoft, and ByteDance) identified by the European Commission in September 2023 must fully comply with all obligations under the Digital Markets Act (DMA).
A data breach notification has been published on the website of the Personal Data Protection Authority ("Authority") by Karel İletişim Hizmetleri A.Ş., Public Library of Science ("PLOS"), and Dirk Rossmann Mağazacılık Ltd. Şti.
The Authority has published a "Notice on the Condition for Personal Data Processing Foreseen by Laws."
In the context of election activities, the Authority has published the "Guide on Protection of Personal Data in Election Activities" to remind public administrations, political parties, candidates, and voters of their rights and obligations.
In order to better understand the technology of "Deepfake" (deep synthesis or deep fake), which is formed from the words deep learning and fake, the Authority has published a "Deepfake Information Note."
A data controller's application for a commitment letter regarding the transfer of personal data abroad has been accepted.
The Authority published a "Guide on the Processing of Turkish Republic (T.C.) Identity Numbers" regarding the issues to be considered when processing T.C. identity numbers, as they can provide access to other personal data of the individual by their nature, which could lead to victimization if obtained by others.
According to a report by the Washington Post, American Express informed the Massachusetts Office of Consumer Affairs and Business Regulation about a data breach. American Express stated that, following a data breach at a third-party company, the names, account numbers, and card details of an undisclosed number of customers were exposed.
According to a report by EdScoop, surveillance tools aimed at increasing security in schools are raising privacy concerns among those advocating for the confidentiality of student data. Advocates warning that the technology could harm students with racial bias issues, stress that schools seeking to enhance surveillance should be cautious of companies employing "deceptive marketing practices."
According to CBC News, the Supreme Court of Canada ruled that an IP address is "subject to a reasonable expectation of privacy" and stated that law enforcement must have a search warrant to obtain an IP address.
Italy's data protection authority, Garante, has determined that OpenAI's artificial intelligence chatbot ChatGPT violated several provisions of the EU General Data Protection Regulation (GDPR) following an information-gathering investigation. OpenAI has 30 days to present its counterarguments.
As of March 2024, the 6 gatekeepers (Apple, Alphabet, Meta, Amazon, Microsoft, and ByteDance) identified by the European Commission in September 2023 must fully comply with all obligations under the Digital Markets Act (DMA).
SubscribeYou can subscribe to stay updated on the shared blogs.