03 October 2019
Turkish Data Protection Board (“Board”) fined Facebook for 256.222 EUR with its decision of September 18, 2019.
The breach is due to a system deficit causing an attacker reaching profile data of a third party if the “View As” mode is used with a video uploader.
Several important points in the decision are below:
Board decided that;
Another interesting point is that the Board limited the scope of its evaluation to data subjects using Facebook in Turkish but not to Facebook users in Turkey.
We will publish our more detailed review later.