New Fines under Data Protection Law
The Personal Data Protection Authority has published the new administrative fines to be applicable in 2026 under the Law on Protection of Personal Data (“LPPD”).
Accordingly, the new fines are as follows:
| Article of the LPPD | Reference article of the LPPD | Explanations | Administrative Fine Upper/Lower Limits (TL) |
| 18/1 (a) | 10 | Failure to inform data subjects | 85, 437- 1,709,200 |
| 18/1 (b) | 12 | Failure to comply with data security requirements | 256,357- 17,092,242 |
| 18/1 (c) | 15 | Failure to comply with the Board’s decisions | 427,263 – 17,092,242 |
| 18/1 (ç) | 16 | Failure to comply with VERBIS registration requirement | 341,809-17,092,242 |
| 18/1 (d) | 9 | Failure to notify the SCCs with the Board | 90,308- 1,806,177 |
