{"id":6956,"date":"2021-11-27T09:00:00","date_gmt":"2021-11-27T06:00:00","guid":{"rendered":"https:\/\/www.efeshukuk.com\/?p=6956"},"modified":"2026-04-01T16:03:05","modified_gmt":"2026-04-01T13:03:05","slug":"kvkk-idari-para-cezalari-2023","status":"publish","type":"post","link":"https:\/\/efeshukuk.com\/en\/kvkk-idari-para-cezalari-2023\/","title":{"rendered":"Personal Data Protection Law Administrative Fines 2023"},"content":{"rendered":"
\n
\"KVKK
Personal Data Protection Law Administrative Fines 2023<\/figcaption><\/figure>\n<\/div>\n\n\n

GDPR Administrative Fines 2023 | Lawyer in Izmir<\/strong><\/p>\n\n\n\n

Administrative Fines<\/h3>\n\n\n\n

Law No. 6698 Personal Data Protection Law<\/a> This is regulated by Article 18 of the Law on Misdemeanors. The administrative fines, which ranged from 10,000 TL to 1,000,000 TL as of 2016 (the effective date of the law), have increased annually in line with the published renewal rates. For the updated administrative fine rates for 2023 related to the misdemeanors regulated in Article 18, please refer to the table below.<\/p>\n\n\n\n

Personal Data Protection Law (KVKK) Sanctions (KVKK Article 18)<\/th>Administrative Fine Amount (Law)<\/th> Administrative Fine Amount 2022<\/th> Administrative Fine Amount 2023<\/th><\/tr><\/thead>
Those who fail to fulfill their obligation to provide information<\/strong> (18\/1-a)<\/td>5,000 \u2013 100,000 TL<\/strong><\/td>13,391 \u2013 267,883 TL<\/strong><\/td>29,852 \u2013 597,191 TL<\/strong><\/td><\/tr>
Obligations regarding data security<\/a> those who do not fulfill<\/strong> (18\/1-b)<\/td>15,000 - 1,000,000 TL<\/strong><\/td>40,179 \u2013 2,678,863 TL<\/strong><\/td>89,571 \u2013 5,971,989 TL<\/strong><\/td><\/tr>
Those who fail to comply with the decisions made by the board.<\/strong> (18\/1-c)<\/td>25,000 - 1,000,000 TL<\/strong><\/td> 66,965 \u2013 2.678.86<\/strong>3 TL <\/strong><\/td>149,285 \u2013 5,971,989 TL<\/strong><\/td><\/tr>
Those who violate the registration and notification obligations to the Data Controllers Registry.<\/strong> (18\/1-c)<\/td>20,000 - 1,000,000 TL<\/strong><\/td> 53,572 \u2013 <\/b>2.678.86<\/strong>3<\/strong> TL <\/strong><\/td>119,428 \u2013 5,971,989 TL<\/strong><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

Furthermore, the law stipulates that if the offenses specified in Article 18 of the Law are committed within public institutions and organizations, or professional organizations with the status of public institutions, disciplinary action will be taken against the civil servants and other public officials working in the relevant public institution or organization, as well as those working in professional organizations with the status of public institutions, upon notification by the Board, and the outcome will be reported to the Board.<\/p>\n\n\n\n

The amounts of administrative fines were published with the announcement of the Personal Data Protection Authority dated 18.01.2022. <\/h2>\n\n\n\n

According to the table prepared by the institution from here<\/a> You can reach us.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

Crimes Regulated Under the Turkish Penal Code<\/h3>\n\n\n\n

Recording personal data<\/em><\/p>\n\n\n\n

Article 135- <\/strong>(1) Anyone who unlawfully records personal data shall be sentenced to imprisonment for one to three years. (2) If the personal data relates to the political, philosophical or religious opinions, racial origins, moral inclinations, sexual lives, health status or trade union affiliations of individuals in violation of the law, the sentence to be given pursuant to the first paragraph shall be increased by half. <\/p>\n\n\n\n

Unlawfully disclosing or obtaining data<\/em><\/p>\n\n\n\n

Article 136- <\/strong>(1) A person who unlawfully gives, disseminates or obtains personal data to another person shall be punished with imprisonment from two to four years. (2) If the subject of the crime is statements and images recorded in accordance with the fifth and sixth paragraphs of Article 236 of the Criminal Procedure Code, the sentence shall be increased by one fold.<\/p>\n\n\n\n

Qualifying circumstances<\/em><\/p>\n\n\n\n

Article 137- <\/strong>(1) If the crimes defined in the above articles are committed: a) by a public official and by abusing the authority given by his\/her duty, b) by taking advantage of the ease provided by a particular profession or art, the penalty shall be increased by half.<\/p>\n\n\n\n

Not deleting the data<\/em><\/p>\n\n\n\n

Article 138- <\/strong>(1) Those who are obliged to delete the data from the system, even though the periods determined by law have passed, will be sentenced to imprisonment for one to two years if they fail to fulfill their duties.. <\/strong>(2) If the subject of the crime is data that must be removed or destroyed in accordance with the provisions of the Criminal Procedure Code, the penalty shall be increased by one fold.<\/p>\n\n\n\n

Complaint<\/em><\/p>\n\n\n\n

Article 139-<\/strong> (1) Except for the recording of personal data, the unlawful disclosure or acquisition of data and the failure to destroy data, the investigation and prosecution of the offences included in this section are subject to complaint.<\/p>\n\n\n\n

Implementation of security measures against legal entities.<\/em><\/p>\n\n\n\n

Article 140- <\/strong>(1) Security measures specific to legal entities are imposed on them due to the commission of the crimes defined in the above articles.<\/p>\n\n\n\n

<\/p>\n\n\n\n

\n

For our other articles we have prepared under the Personal Data Protection Law;<\/mark><\/p>\n\n\n\n

\n
\n