KVKK statement on claims that 'citizens' personal data was stolen'

The Personal Data Protection Authority (KVKK) has issued a statement regarding claims that citizens' personal data has been stolen.

In the statement made by the authority, it was noted that under the Personal Data Protection Law No. 6698, it is among the powers of the KVKK to regulate whether personal data is processed in accordance with the law and to issue regulations regarding data security.

The decision emphasized that in the event that processed personal data is obtained by others through unlawful means, the data controller is required by the relevant law to notify the affected parties and the KVKK as soon as possible, and it was stated that after a breach notification, the authority conducts an ex officio investigation and may announce this situation if necessary.

Pointing out that there has been no breach notification submitted to the KVKK regarding the claim that "citizens' personal data has been stolen," the statement included the following expressions:

"News reports have appeared on various news channels and social media platforms regarding the theft of the data of 108 million of our citizens, and there has been no data breach notification submitted to our authority regarding this matter. Since similar news has appeared in the media before, there is already an ex officio investigation decision taken by the KVKK regarding the news of data breaches allegedly occurring especially during the pandemic process, and work is continuing in coordination with the relevant public institutions."

News Source: AA