Administrative fines determined under the Turkish Personal Data Protection Law No. 6698 (“KVKK”) are updated annually at the beginning of each calendar year based on the revaluation rate announced pursuant to Article 17 of the Misdemeanors Law No. 5326 and Article 298 of the Tax Procedure Law.
Compared to 2024, the revaluation rate for 2025 has been determined as 43,93%, and the administrative fines have been increased accordingly. The comparative table of administrative fines for 2024 and 2025 is as follows:
Article of KVKK on Penalties | Article of KVKK Violated | Obligation Breached | 2024 Fine Amounts (in TL) | 2025 Fine Amounts (in TL) |
18/a | 10 | Failure to fulfill the obligation to inform | TL 47,303 – 946,308 | TL 68,083 – 1,362,021 |
18/b | 12 | Failure to fulfill data security obligations | TL 141,934 – 9,463,213 | TL 204,285 – 13,620,402 |
18/c | 15 | Failure to comply with board decisions | TL 236,557 – 9,463,213 | TL 340,476 – 13,620,402 |
18/ç | 16 | Violation of the obligation to register and notify the data controllers registry (VERBIS) | TL 189,245 – 9,463,213 | TL 272,380 – 13,620,402 |