Warning To Research Companies: Inform First, Then Obtain Consent 28 October 2024
After the number of complaints to the Personal Data Protection Authority ("Authority"), the Authority published a Public Announcement on "Personal Data Processing Activities of Research Companies by Using "Random-Digit Dialing as a Method of Telephone Sampling" for the purpose of Statistical Research" ("Public Announcement").
What does the Subject of Complaints? |
It is related to the fact that although the persons concerned did not share their telephone numbers with the research companies in any way, they were called by the research companies and they were not informed about this issue. |
The Arguement of Research Companies |
The research companies stated that the telephone numbers are randomly and automatically generated by the system/software and that the method used for the calls is a statistical methodology known as the "random-digit dialing as a method of telephone sampling" method, which is applied worldwide. They also expressed that they obtain the consent of the data subjects; if the consent is not given by the data subjects, they retain data by Pseudonymisation method. |
The Authority's Detection |
The following assessments are made by the Authority regarding the incident in question. |
|
Assessment |
The Authority underlined in the Public Announcement that the use of a pseudonym does not anonymise personal data. Additionally, the criterion of directly identifying the data subject is not adequate for personal data processing activity; a personal data processing activity will also be relevant when the data subject is identifiable. For instance, if a research company collects information such as the place of residence and economic characteristics of the data subject without identifying information details like the name and surname of the data subject, this data still constitutes personal data processing, as it can be linked to identifiable individuals. |
Another important point from the Public Announcement is that the legal requirement for explicit consent aligns with the Authority's Principle Decision, which states that the processing of personal data by research companies only for the purpose of profit or economic benefit is inadequate for assessing legitimate interest. However, to the extent necessary for the research, explicit consent will not be required for the processing of information such as the date and duration of the call of the data subjects, the caller number and the traffic log in the form of the number called, which may be based on the legitimate interest of the data controller. |
Conclusion |
The decisions of the Authority must be complied with. In this context, data controllers should analyse the effects of the Public Announcement on their personal data processing processes. |
_____________________________ 1 https://www.kvkk.gov.tr/Icerik/5434/2019-78 2 https://www.kvkk.gov.tr/Icerik/7989/-Arastirma-Sirketlerinin-Istatistiksel-Arastirma-Yapmak-Amaciyla-Rastgele-Numara-Cevirme-ile-Telefon-Mulakati-Yontemi-Kullanarak-Gerceklestirdikleri-Kisisel-Veri-Isleme-Faaliyetleri-Hakkinda-Kamuoyu-Duyurusu 3 https://www.kvkk.gov.tr/Icerik/7989/-Arastirma-Sirketlerinin-Istatistiksel-Arastirma-Yapmak-Amaciyla-Rastgele-Numara-Cevirme-ile-Telefon-Mulakati-Yontemi-Kullanarak-Gerceklestirdikleri-Kisisel-Veri-Isleme-Faaliyetleri-Hakkinda-Kamuoyu-Duyurusu |
Other News
-
31.10.2024
Public Announcement on Standard Contract Notification Module Published
Public Announcement on Standard Contract Notification Module published on 24.10.2024 on the official website of Personal Data Protection Authority ("Authority"). By the decision dated 17.10.2024, the Personal Data Protection Board ("Board") created "Standard Contract Notification Module" ("Module") in order to carry out standard contract notification processes in a faster and more efficient manner and decided that the notifications could also be carried out online via the Module.
-
21.10.2024
EU Data Act
In today's world, where digitalization is gaining significant pace, data sharing and management are of vital importance for all sectors. In this context, the European Union has adopted the EU Data Act, which reshapes the regulations on data sharing. It aims to promote the wider use of data generated by digital devices and services while introducing new rules for a fair data economy.
-
2.10.2024
Regulation No.2023/1115 on the Prevention of Deforestation and Rules for Companies Exporting Products to the European Union
According to data from the United Nations Food and Agriculture Organization, it has been determined that the world's forests decreased by 178 million hectares over the 30-year period from 1990 to 2020.
-
1.10.2024
SEC Climate Disclosure Rule
For the sake of a livable environment and the future of our world, sustainability and ecosystem protection are becoming increasingly important. In this context, governments are introducing environmental reporting standards for companies, which are among the actors that most significantly impact the ecosystem.
-
26.7.2024
2024-2025 Action Plan For The National Artificial Intelligence Strategy Has Entered Into Force
Presidency of the Republic of Türkiye Digital Transformation Office published 2024-2025 Action Plan for the National Artificial Intelligence Strategy within the framework of the 12th Development Plan in order to further Turkey's progress in the field of artificial intelligence and to achieve the set targets.
-
30.5.2024
Important Amendments Introduced to the Turkish Commercial Code by Law No.7511
The Law on Amendments on Turkish Commercial Code and Certain Laws (the "Law") was published in the Official Gazette dated 29 May 2024 and numbered 32560.
-
8.5.2024
Law Proposal on the Amendments on the Turkish Commercial Code Numbered 6102 and Certain Laws in Offered to the Parliament
Law Proposal on the Amendments on the Turkish Commercial Code and Certain Laws is offered to the parliament. Within the scope of the proposal, it is planned to make important amendments to a number of laws, particularly the Turkish Commercial Code, the Cooperatives Law, the Law on the Protection of Competition and the Law on Consumer Protection.
-
19.4.2024
The Constitutional Court Decision Annulled The Regulation Envisaging Liability For Litigation Expenses Within The Scope Of Mediation In Civil Disputes
In accordance with paragraph 11 of Article 18/A of Law No. 6325 on Mediation in Civil Disputes1 ("the Code"), a party shall be held liable for the entire cost of the litigation, nothwithstanding justification at the conclusion of the proceedings, and shall not be granted power of attorney fee if he or she fails to appear for the initial session of mandatory mediation without providing an explanation.The aforementioned regulation is outlined as follows:
-
8.4.2024
E-Application" Period In Capital Markets Board Applications
With its announcement dated 5 February 2024, the Capital Markets Board ("Board") announced to the public that capital market institutions, organisations and partnerships will be able to make their applications more quickly and effectively through the e-Application System.
-
5.4.2024
The Amounts In The Pre-Conditions To Be Complied With Before The Initial Public Offering Of Shares In Several Sectors Were Decreased
The Capital Markets Board ("Board" or "CMB") decreased the financial thresholds for financial statements, especially considering the sectoral differences of the companies that submitting to the Board for initial public offering and the 12th Development Plan ("Plan") prepared by the Presidency of the Strategy and Budget Directorate.
-
15.3.2024
New Regulations Introduced With The 8th Judicial Package
The Law No. 7499 on the Amendment of the Code of Criminal Procedure and Certain Laws ("Law"), which contains amendments and new regulations known as the "8th Judicial Package", was published in the Official Gazette dated 12 March 2024 and numbered 32487. In this article, we will discuss the amendments to the Criminal Procedure Code No. 5271 (" CPC"), Turkish Criminal Code No. 5237 ("TCC"), Turkish Civil Code No. 4721 ("TCC"), Enforcement and Bankruptcy Code No. 2004 ("EBC") and Law No. 6384 on the Duties and Working Procedures and Principles of the Compensation Commission.
-
12.3.2024
Changes In The PDPL Was Published In THE Official Gazette
Law No. 7499 on Amendments to the Code of Criminal Procedure and Some Laws ("Law No. 7499") including critical amendments to the Law No. 6698 on the Personal Data Protection Law ("PDPL") was published in the Official Gazette on March 12, 2024.
-
9.2.2024
Amendments Were Made To The Regulations Based On The Occupational Health And Safety Law
In the Official Gazette dated 4 February 2024 and numbered 32450, amendments were made to some regulations issued based on the Occupational Health and Safety Law No. 6331:
-
1.2.2024
Turkish Competition Board Mergers And Acquisitions Outlook Report For 2023 Has Been Published
On January 5th, 2024, the Turkish Competition Authority has published the Report prepared by the Competition Board on Mergers, Acquisitions And Privatisation Transactions in 2023 ("Report").
-
31.1.2024
Important Principle Decision From The Advertising Board Regarding Discount Sale Advertisements
At the first meeting of the year held on January 9, 2024, the Advertising Board made an important principle decision regarding discount sale advertisements by amending the "Guideline on Advertisements Containing Price Information and Discount Sale Advertisements and Commercial Practices" in order to prevent consumer victimization through misleading advertisements and practices that lead to unfair competition in the retail trade sector.