Administrative Fines Under the Personal Data Protection Law No. 6698 Updated
05.01.2026
Sevim Özkan
The Personal Data Protection Authority published the table showing the amounts of administrative fines imposed within the scope of Article 18 of the Personal Data Protection Law No. 6698 (the Law) increased by the revaluation rate for 2026 in its announcement dated December 31, 2025.
An administrative fine shall be imposed:
- From TRY 85,437 to TRY 1,709,200 for those who fail to fulfill the disclosure obligation stipulated in Article 10 of the Law,
- From TRY 256,357 to TRY 17,092,242 for those who fail to fulfill the obligations regarding data security stipulated in Article 12 of the Law,
- From TRY 427,263 to TRY 17,092,242 for those who fail to comply with the decisions issued by the Board under Article 15 of the Law,
- From TRY 341,809 to TRY 17,092,242 for those who violate the obligation to register and notify the Data Controllers Registry stipulated in Article 16 of the Law,
- From TRY 90,308 to TRY 1,806,177 for those who fail to fulfill the notification obligation stipulated in paragraph 5 of Article 9 of the Law.
All rights of this article are reserved. This article may not be used, reproduced, copied, published, distributed, or otherwise disseminated without quotation or Erdem & Erdem Law Firm's written consent. Any content created without citing the resource or Erdem & Erdem Law Firm’s written consent is regularly tracked, and legal action will be taken in case of violation.