(1) Articles 135 to 140 of Turkish Penal Code No. 5237 of 26/9/2004 shall be applied to the crimes concerning personal data.

(2) Those who do not erase or anonymize personal data as contrary to the provision of Article 7 of this Law shall be punished in accordance with Article 138 of the Law No. 5237.

1) For the purposes of this Law;

• a) An administrative fine of 5.000 to 100.000 TL shall be imposed on those who fail to fulfil the obligation to inform as stipulated in Article 10;
• b) An administrative fine of 15.000 to 1.000.000 TL shall be imposed on those who fail to fulfil the obligations related to data security as stipulated in Article 12;
• c) An administrative fine of 25.000 to 1.000.000 TL shall be imposed on those who fail to comply with the decisions issued by the Board as stipulated in Article 15;
• ç) An administrative fine of 20.000 to 1.000.000 TL shall be imposed on those who act contrary to the obligations for registry with the Data Controllers’ Registry and for notification as stipulated in Article 16;
• d) (Added: 2/3/2024- Art. 7499/35) An administrative fine of 50.000 to 1.000.000 TL shall be imposed on those who fail to fulfil the obligation to notify as stipulated in Article 9(5).

(2) (Amended: 2/3/2024- Art. 7499/35) The administrative fines provided for in subparagraphs (a), (b), (c) and (ç) of the first paragraph shall be imposed on the data controller; the fine stipulated in subparagraph (d) shall be imposed on the data controller or on natural persons and legal persons governed by private law that process data.

(3) (Added: 2/3/2024- Art. 7499/35) Administrative fines imposed by the Board may be appealed in administrative courts.

(4) In the event that the actions listed in the first paragraph be committed within the public institutions and organizations, and the professional organizations with public institution status, the disciplinary provisions shall be applied to the civil servants and other public officers employed in the relevant public institutions and organizations and those employed in the professional organizations with public institution status upon the notice of the Board, and the result shall reported to the Board.