SavedAdd your journal

Journals / Journal of Aviation / 2026 / Volume: 10 Issue: 1

Assessment of The Personal Data Protectıon Board's Decision on A Data Breach Committed by an Airline Company

Ayşe Yiğit Şakar(İSTANBUL RUMELİ ÜNİVERSİTESİ)0000-0002-1432-9398
Duygu Arda(İstanbul Rumeli Üniversitesi)0000-0003-0695-4908
Pages
—
Publication Date
2026-02-26
🏛️Bibliographic metadata and full text access for this article are provided via DergiPark.
DergiPark Record ↗
✨

AI Summary & Key Takeaways

AI Insight
⚡ TL;DR(Too Long; Didn't Read)

The decision on this case, which demonstrates the importance of the legal obligations of data controllers and that violations can lead to serious sanctions, is very important in terms of improving data protection mechanisms and protecting the rights of individuals.

📌 3 Key Takeaways

🎯
Objective & Hypothesis:Today, the increase in technological developments has led to both the inclusion of information in various fields within the scope of personal data and the expansion of the scope of processing of personal data accordingly.
📊
Key Findings & Data:In its decision dated 03.08.2023 and numbered 2023/1309, the Board evaluated the complaint regarding the data breach of an airline company.
💡
Conclusion & Impact:The decision on this case, which demonstrates the importance of the legal obligations of data controllers and that violations can lead to serious sanctions, is very important in terms of improving data protection mechanisms and protecting the rights of individuals.
🔬Design:Research Article
📍Scope:2023 Verileri
⚙️Variables:Personal data · Data breach. · Personal Data Protection Board

Abstract

Today, the increase in technological developments has led to both the inclusion of information in various fields within the scope of personal data and the expansion of the scope of processing of personal data accordingly. In order to protect personal data and prevent violations, a legal basis has been tried to be established in both national and international legislation. While the legislation aims to protect the right to privacy, it also aims to regulate and supervise data processing activities and to prevent violations of the law. The Personal Data Protection Board is an independent authority that serves this purpose by supervising the lawful activities of data controllers. In its decision dated 03.08.2023 and numbered 2023/1309, the Board evaluated the complaint regarding the data breach of an airline company. The incident concerned a passenger's ability to view the identity and travel documents of other persons. The fact that the data of the data subjects was accessible by third parties shows that technical and administrative measures were not taken. The decision on this case, which demonstrates the importance of the legal obligations of data controllers and that violations can lead to serious sanctions, is very important in terms of improving data protection mechanisms and protecting the rights of individuals.

🔖

Cite This Article

Şakar, A. Y., Arda, D. (2026). Assessment of The Personal Data Protectıon Board's Decision on A Data Breach Committed by an Airline Company. Journal of Aviation, Volume: 10 Issue: 1. https://doi.org/10.30518/jav.1770648

📄 Full Text PDF Viewer

📄

PDF görüntüleyici hazırlanıyor...

References (21)

  1. Akgül, A. (2016). Protection of personal data in the light of the decisions of the Council of State and the European Court of Human Rights (2nd ed.).
  2. Akkurt, S. S. (2020). A comparative perspective on approaches to the legal nature of the concept of personal data. Journal of Personal Data Protection, 2(1).
  3. Aksoy, H. C. (2016). Protection of personal data. Çakmak Publishing House.
  4. Aşıkoğlu, Ş. İ. (2018). Protection of personal data and big data in European Union and Turkish law (2nd ed.). On İki Levha Publications.
  5. Aşikoğlu, Ş. İ. (2023). In P. Ç. Aksoy & H. C. Aksoy (Eds.), The right to protection of personal data: An academic perspective on the protection of personal data (pp. 19 et seq.). KVKK Akademi. https://www.kvkk.gov.tr (Date of access: 02.01.2025)
  6. Banisar, D., & Davies, S. (1999). Privacy and human rights: An international survey of privacy laws and practice. Global Internet Liberty Campaign.
  7. Bilir, F. (2023). The emergence of practices and legal regulations on the protection of personal data. Journal of Justice, 71.
  8. Canbay, Y. (2023). Deletion, destruction or anonymization of personal data. In P. Ç. Aksoy & H. C. Aksoy (Eds.), The right to protection of personal data: An academic perspective on the protection of personal data.
  9. Constitutional Court. Decisions Information Bank, https://kararlarbilgibankasi.anayasa.gov.tr. Access Date: Constitutional Court. Decisions Information Bank, (CC, E.2014/74, J.2014/201, 25/12/2014; E.2014/180, J.2015/30, 19/3/2015); Access date: 22.01.2025; CC,E.2014/122,J.2015/123,30/12/2015; access date: 18.04.2025; E.2014/74, J.2014/201, 25/12/2014; E.2014/180, J.2015/30, 19/3/2015).
  10. Dülger, M. V. (2020). Personal data protection law. Law Academy.
  11. Ersoy Kekevi, Ç. (2023). General concepts. In P. Ç. Aksoy & H. C. Aksoy (Eds.), The right to protection of personal data: An academic overview of personal data protection.
  12. International Civil Aviation Organization, Erişim Tarihi: https://www.icao.int/Security/FAL/ANNEX9/Documents/9944_cons_en.pdf.
  13. Jain, P., Gyanchandani, M., & Khare, N. (2016). Big data privacy: A technological perspective and review. Journal of Big Data, 3(1).
  14. Kişisel Verileri Koruma Kurumu. Kişisel Verilerin Korunması Kanunu ve ilgili bilgiler, Erişim Tarihi: www.kvkk.gov.tr
  15. Küzeci, E. (2020). Protection of personal data (4th ed.). Twelve Plate Publications.
  16. Küzeci, E. (2023). The right to protection of personal data. In P. Ç. Aksoy & H. C. Aksoy (Eds.), The right to protection of personal data: An academic perspective on the protection of personal data.
  17. Oğuz, S. (2018). General principles of personal data protection law. Journal of Information Economics and Management, 13(2).
  18. Turan Başara, G. (2020). Personal data processing contract. Journal of the Court of Dispute, 8(16).
  19. Us Doğan, E. (2023). “Application and complaint procedures and the obligation to fulfill board decisions”. In P. Ç. Aksoy & H. C. Aksoy (Eds.), The right to protection of personal data: An academic perspective on the protection of personal data (p. 238). https://www.kvkk.gov.
  20. Warren, S. D., & Brandeis, L. D. (1890). The right to privacy. Harvard Law Review, 4(5), 193–220.
  21. Yücedağ, N. (2019). General principles within the scope of personal data protection law. Journal of Personal Data Protection, 1(1).