Company data leaks (e.g. banking, telecommunications, e-commerce) can affect millions of people. The rights of the victim are many.
Typical Leaks
- Customer identification information
- Credit card numbers
- Passwords (hash or plain)
- Address, telephone, e-mail
- Health information
Notification of Violation (KVKK article 12)
- Company within 72 hours Notification to the Board
- Notification to the victims (for wide impact)
- Taking corrective measures
Rights of the Victim
- Request for compensation to the company
- Complaint to the KVKK Board
- Material compensation (if the leaked card was misused)
- Pecuniary damage (violation of privacy)
Collective Cases
- Those affected by the same leak together
- Lawyer coordination
- Collective compensation
Company's Liability
- Lack of adequate security measures
- Delay in notification of violation
- Image damage
- Material compensation (to the victims)
- Administrative fine (KVKK)
Preventive Measures (Individual)
- Different password for each account (password manager)
- 2FA active
- Credit card limit setting
- Regular control of account movements
- Leak inquiry with Have I Been Pwned
Supreme Court 4. HD
4. HD accepts that data leak victims have the "right to moral compensation" and that the causal link between the breach and the damage can be easily proven.
KVKK and IT law lawyer is recommended.