The various measures are taken against Covid-19 virus that take hold of all over the world and our country, by data controllers which operate both in public and private sectors. While these developments continue, a statement become necessary to be made with respect to the periods that are necessary to be taken into account by data controllers in terms of complaints, notices and data breach notifications submitted to the Authority within the scope of Personal Data Protection Law No. 6698.

As known, relating to the complaints, notices and data breach notifications submitted to the Authority within the scope of the legislation on the protection of personal data, various periods are determined both in the Law and relevant legislation with regard to the obligations of data controllers to either the Authority or data subjects. The compliance with these periods by data controllers is important.

On the other hand, in this extraordinary conditions that our country is in, by taking into account that the different operational implementations (remote working, shift working etc.) are used with respect to the measures taken by data controllers, for each complaint or data breach notification, it is announced to the public respectfully that the Personal Data Protection Board will pay regard to the extraordinary conditions that we are in with respect to the consideration of the periods that data controllers are obliged to comply with.