Current Statistics on the Personal Data Protection Authority’s Activities for 2025
As GRC LEGAL, we would like to share the data presented at the workshop organised by the Personal Data Protection Authority in collaboration with the Compliance Association, of which we are a member, under the theme “The 10th Anniversary of Data Protection: A Future Perspective in the Light of the GDPR” , the data shared at the workshop was particularly striking in terms of highlighting the scale of data protection law in practice in Turkey.
At the workshop held on 13 March 2026, the statistics announced by Mr Faruk Bilir, Chairman of the Personal Data Protection Board, provided a significant overview of the Authority’s activities to date and the current state of data protection practice. Notably, the presentation highlighted that not all data breach notifications are published; only those breaches posing a risk to the individuals concerned are shared with the public.
Some of the data shared during the workshop were as follows:
• 62,343 applications were submitted, of which 59,451 have been resolved.
• 1,988 data breach notifications were made, of which 416 were shared with the public.
• To date, the Board has imposed a total of 1.344 billion TL in administrative fines.
• 1,370 legal opinions were issued.
• 13 commitment processes were completed.
• 4,220 Standard Contract Clauses (SCC) notifications were submitted.
We would like to thank Mr Faruk Bilir for his contributions, having delivered an insightful talk on the development of data protection law and current approaches in practice.