by Ekrem Duman | Aug 24, 2026 | Data Privacy & KVKK
⚡ TL;DRThe Dutch Data Protection Authority has fined Uber €825 million — the second-largest GDPR penalty ever issued — for using an automated system to suspend and permanently deactivate driver accounts without meaningful human review. The case turns on GDPR Article...
by Ekrem Duman | May 31, 2026 | Data Privacy & KVKK, Law
TL;DR Cookie consent compliance is about more than a banner. Websites must identify cookies, pixels, SDKs, tags, fingerprinting scripts, analytics tools, and advertising technologies; classify them by purpose; block non-essential tracking until valid consent where...
by Ekrem Duman | May 31, 2026 | Data Privacy & KVKK, Law
TL;DR A data breach response plan is the legal and operational playbook for identifying, containing, assessing, notifying, and remediating personal data incidents. The first hours matter: preserve evidence, stop ongoing exposure, identify affected data, assess...
by Ekrem Duman | May 31, 2026 | Data Privacy & KVKK, Law
TL;DR A data processing agreement, or DPA, is the contract that controls how a vendor, processor, service provider, or contractor may handle personal data. It defines the parties’ roles, processing instructions, data categories, security duties, sub-processor...
by Ekrem Duman | May 31, 2026 | Data Privacy & KVKK, Law
TL;DR KVKK is Turkey’s main personal data protection law. It regulates how data controllers collect, process, transfer, secure, retain, and delete personal data relating to individuals. Although KVKK shares many concepts with European privacy law, it is not a...
by Ekrem Duman | May 31, 2026 | Data Privacy & KVKK, Law
TL;DR GDPR compliance starts with knowing which personal data you process, why you process it, which lawful basis supports each activity, and how you prove accountability. The six lawful bases are consent, contract necessity, legal obligation, vital interests, public...
