Pursuant to 5th paragraph of article 12 regarding Data Security Obligations of the Data Protection Law No. 6698, “if the processed personal data is –illegally- obtained by others, the data officer shall inform the relevant person and KVKK Board as soon as possible. The Board may, if necessary, announce this situation on its website or in any other way it deems appropriate.” According to the public announcement made by KVKK (the Authority) in accordance with this provision;
- DenizBank A.Ş., within the scope of the controls carried out by the Board of Inspectors understood that, query screens containing the credit information of the Bank were accessed more than the required number of inquiries, by one of the Bank's employee who worked as the Customer Transaction and Sales Responsible at its Beylerbeyi Branch. It was understood that 3.038 customers and 2.851 non customers of the Bank were affected by the mentioned violation that occurred between July 2018 and May 2019 as a result of the employee's use of this authority for purposes other than the Bank's access and information security policies.
It has been stated that the data violation notification has been decided to be announced on the Authority's website and the investigation is still pending.
Download as PDFAuthority For Protection Of Personal Data