OneTrust DataGuidance reports:
The Personal Data Protection Authority (‘KVKK’) published, on 23 June 2020, its decision (‘the Decision’) of 16 April 2020, fining a gaming company a total of TRY 1,100,000 (approx. €142,980) for data breach notification violations. In particular, the Decision concerns a data breach suffered by the gaming company in which hackers were able to gain access to the company’s player data affecting 39,995 individuals in Turkey.
Read more on OneTrust.
Imagine if our regulators actually fined entities for inadequate data security and for not disclosing breaches within 72 hours….