The Personal Data Protection Law No. 6698 (“PDPL”), Administrative fines, which were prescribed in line with Article 18, are updated through revaluation rates beginning from each calendar year, as per Article 17 of Law on Misdemeanours No. 5326, as well as the repeating Article 298 of Tax Procedure Law.
In this context, the revaluation rate for 2026 has been determined as 25.49% based on the 2025 rate. In line with this rate, the minimum and maximum amounts of the administrative fines that may be imposed under the PDPL have been increased.
The comparative table of administrative fines for 2025 and 2026 is set out below:
| Relevant Article of the PDPL | Violated Article of the PDPL | Breached Obligation | Fine Amounts for 2025 (in TRY) | Fine Amounts for 2026 (in TRY) |
| 18/a | 10 | Failure to fulfil the obligation to inform | 68.083 -1.362.021 TRY | 85.437 -1.709.200 TRY |
| 18/b | 12 | Failure to fulfil the obligations related to data security | 204.285 – 13.620.402 TRY | 256.357 -17.092.242 TRY |
| 18/c | 15 | Failure to comply with the decisions issued by the Board | 340.476 -13.620.402 TRY | 427.263 -17.092.242 TRY |
| 18/ç | 16 | Acting contrary to the obligations for registry with the Data Controllers’ Registry and for notification | 272.380 -13.620.402 TRY | 341.809 -17.092.242 TRY |
| 18/d | 9 | Failure to fulfil the obligation to notify the Authority within 5 days from the date of execution of the Standard Contract as stipulated in the fifth paragraph of Article 9 |
71.965 -1.439.300 TRY |
90.308 -1.806.177 TRY |
