Question 1

KVKK Administrative Fines for 2026

Accepted Answer

The 2026 KVKK fines have been updated by the Personal Data Protection Authority by applying the annual revaluation rate. The minimum and maximum KVKK administrative fines applicable for 2026 are listed below: For Failure to Fulfill Information Obligation, the 2026 administrative fine has been set with a minimum of 85.437 TL and a maximum of 1.709.200 TL. For Failure to Fulfill Data Security Obligations, the 2026 administrative fine has been set with a minimum of 256.357 TL and a maximum of 17.092.242 TL. For Failure to Comply with Board Decisions, the 2026 administrative fine has been set with a minimum of 427.263 TL and a maximum of 17.092.242 TL. For Violation of VERBIS Registration and Notification Obligation, the 2026 administrative fine has been set with a minimum of 341.809 TL and a maximum of 17.092.242 TL. For Failure to Notify the Institution of Standard Contracts within 5 Business Days, the 2026 administrative fine has been set with a minimum of 90.308 TL and a maximum of 1.806.177 TL.

Question 2

KVKK Administrative Fines for 2025

Accepted Answer

The 2025 KVKK fines have been updated by the Personal Data Protection Authority by applying the annual revaluation rate. The minimum and maximum KVKK administrative fines applicable for 2025 are listed below: For Failure to Fulfill Information Obligation, the 2025 administrative fine has been set with a minimum of 68.083 TL and a maximum of 1.362.021 TL. For Failure to Fulfill Data Security Obligations, the 2025 administrative fine has been set with a minimum of 204.285 TL and a maximum of 13.620.402 TL. For Failure to Comply with Board Decisions, the 2025 administrative fine has been set with a minimum of 340.476 TL and a maximum of 13.620.402 TL. For Violation of Data Controllers Registry Registration and Notification Obligation, the 2025 administrative fine has been set with a minimum of 272.380 TL and a maximum of 13.620.402 TL. For Failure to Fulfill the Obligation to Notify as Stipulated in Article 9(5), the 2025 administrative fine has been set with a minimum of 71.965 TL and a maximum of 1.439.300 TL.

Question 3

KVKK Administrative Fines for 2024

Accepted Answer

The 2024 KVKK fines have been updated by the Personal Data Protection Authority by applying the annual revaluation rate. The minimum and maximum KVKK administrative fines applicable for 2024 are listed below: For Failure to Fulfill Information Obligation, the 2024 administrative fine has been set with a minimum of 47.303 TL and a maximum of 946.308 TL. For Failure to Fulfill Data Security Obligations, the 2024 administrative fine has been set with a minimum of 141.934 TL and a maximum of 9.463.213 TL. For Failure to Comply with Board Decisions, the 2024 administrative fine has been set with a minimum of 236.728 TL and a maximum of 9.463.213 TL. For Violation of Data Controllers Registry Registration and Notification Obligation, the 2024 administrative fine has been set with a minimum of 189.382 TL and a maximum of 9.463.213 TL. For Failure to Fulfill the Obligation to Notify as Stipulated in Article 9(5), the 2024 administrative fine has been set with a minimum of 50.000 TL and a maximum of 1.000.000 TL.

Question 4

KVKK Administrative Fines for 2023

Accepted Answer

The 2023 KVKK fines have been updated by the Personal Data Protection Authority by applying the annual revaluation rate. The minimum and maximum KVKK administrative fines applicable for 2023 are listed below: For Failure to Fulfill Information Obligation, the 2023 administrative fine has been set with a minimum of 29.857 TL and a maximum of 597.198 TL. For Failure to Fulfill Data Security Obligations, the 2023 administrative fine has been set with a minimum of 89.579 TL and a maximum of 5.972.040 TL. For Failure to Comply with Board Decisions, the 2023 administrative fine has been set with a minimum of 149.300 TL and a maximum of 5.972.040 TL. For Violation of Data Controllers Registry Registration and Notification Obligation, the 2023 administrative fine has been set with a minimum of 119.436 TL and a maximum of 5.972.040 TL.

Question 5

KVKK Administrative Fines for 2022

Accepted Answer

The 2022 KVKK fines have been updated by the Personal Data Protection Authority by applying the annual revaluation rate. The minimum and maximum KVKK administrative fines applicable for 2022 are listed below: For Failure to Fulfill Information Obligation, the 2022 administrative fine has been set with a minimum of 13.391 TL and a maximum of 267.883 TL. For Failure to Fulfill Data Security Obligations, the 2022 administrative fine has been set with a minimum of 40.179 TL and a maximum of 2.678.863 TL. For Failure to Comply with Board Decisions, the 2022 administrative fine has been set with a minimum of 66.965 TL and a maximum of 2.678.863 TL. For Violation of Data Controllers Registry Registration and Notification Obligation, the 2022 administrative fine has been set with a minimum of 53.572 TL and a maximum of 2.678.863 TL.

Question 6

KVKK Administrative Fines for 2021

Accepted Answer

The 2021 KVKK fines have been updated by the Personal Data Protection Authority by applying the annual revaluation rate. The minimum and maximum KVKK administrative fines applicable for 2021 are listed below: For Failure to Fulfill Information Obligation, the 2021 administrative fine has been set with a minimum of 9.832 TL and a maximum of 196.684 TL. For Failure to Fulfill Data Security Obligations, the 2021 administrative fine has been set with a minimum of 29.500 TL and a maximum of 1.966.860 TL. For Failure to Comply with Board Decisions, the 2021 administrative fine has been set with a minimum of 49.167 TL and a maximum of 1.966.860 TL. For Violation of Data Controllers Registry Registration and Notification Obligation, the 2021 administrative fine has been set with a minimum of 39.334 TL and a maximum of 1.966.860 TL.

Question 7

KVKK Administrative Fines for 2020

Accepted Answer

The 2020 KVKK fines have been updated by the Personal Data Protection Authority by applying the annual revaluation rate. The minimum and maximum KVKK administrative fines applicable for 2020 are listed below: For Failure to Fulfill Information Obligation, the 2020 administrative fine has been set with a minimum of 9.012 TL and a maximum of 180.263 TL. For Failure to Fulfill Data Security Obligations, the 2020 administrative fine has been set with a minimum of 27.037 TL and a maximum of 1.802.640 TL. For Failure to Comply with Board Decisions, the 2020 administrative fine has been set with a minimum of 45.062 TL and a maximum of 1.802.640 TL. For Violation of Data Controllers Registry Registration and Notification Obligation, the 2020 administrative fine has been set with a minimum of 36.050 TL and a maximum of 1.802.640 TL.

Question 8

KVKK Administrative Fines for 2019

Accepted Answer

The 2019 KVKK fines have been updated by the Personal Data Protection Authority by applying the annual revaluation rate. The minimum and maximum KVKK administrative fines applicable for 2019 are listed below: For Failure to Fulfill Information Obligation, the 2019 administrative fine has been set with a minimum of 7.352 TL and a maximum of 147.058 TL. For Failure to Fulfill Data Security Obligations, the 2019 administrative fine has been set with a minimum of 22.057 TL and a maximum of 1.470.583 TL. For Failure to Comply with Board Decisions, the 2019 administrative fine has been set with a minimum of 36.762 TL and a maximum of 1.470.583 TL. For Violation of Data Controllers Registry Registration and Notification Obligation, the 2019 administrative fine has been set with a minimum of 29.410 TL and a maximum of 1.470.583 TL.

Question 9

KVKK Administrative Fines for 2018

Accepted Answer

The 2018 KVKK fines have been updated by the Personal Data Protection Authority by applying the annual revaluation rate. The minimum and maximum KVKK administrative fines applicable for 2018 are listed below: For Failure to Fulfill Information Obligation, the 2018 administrative fine has been set with a minimum of 5.942 TL and a maximum of 118.854 TL. For Failure to Fulfill Data Security Obligations, the 2018 administrative fine has been set with a minimum of 17.827 TL and a maximum of 1.188.542 TL. For Failure to Comply with Board Decisions, the 2018 administrative fine has been set with a minimum of 29.712 TL and a maximum of 1.188.542 TL. For Violation of Data Controllers Registry Registration and Notification Obligation, the 2018 administrative fine has been set with a minimum of 23.770 TL and a maximum of 1.188.542 TL.

Question 10

KVKK Administrative Fines for 2017

Accepted Answer

The 2017 KVKK fines have been updated by the Personal Data Protection Authority by applying the annual revaluation rate. The minimum and maximum KVKK administrative fines applicable for 2017 are listed below: For Failure to Fulfill Information Obligation, the 2017 administrative fine has been set with a minimum of 5.191 TL and a maximum of 103.830 TL. For Failure to Fulfill Data Security Obligations, the 2017 administrative fine has been set with a minimum of 15.574 TL and a maximum of 1.038.300 TL. For Failure to Comply with Board Decisions, the 2017 administrative fine has been set with a minimum of 25.957 TL and a maximum of 1.038.300 TL. For Violation of Data Controllers Registry Registration and Notification Obligation, the 2017 administrative fine has been set with a minimum of 20.766 TL and a maximum of 1.038.300 TL.

Question 11

KVKK Administrative Fines for 2016

Accepted Answer

The 2016 KVKK fines have been updated by the Personal Data Protection Authority by applying the annual revaluation rate. The minimum and maximum KVKK administrative fines applicable for 2016 are listed below: For Failure to Fulfill Information Obligation, the 2016 administrative fine has been set with a minimum of 5.000 TL and a maximum of 100.000 TL. For Failure to Fulfill Data Security Obligations, the 2016 administrative fine has been set with a minimum of 15.000 TL and a maximum of 1.000.000 TL. For Failure to Comply with Board Decisions, the 2016 administrative fine has been set with a minimum of 25.000 TL and a maximum of 1.000.000 TL. For Violation of Data Controllers Registry Registration and Notification Obligation, the 2016 administrative fine has been set with a minimum of 20.000 TL and a maximum of 1.000.000 TL.

Article	Relevant Legal Provision	Penalty Amount
Failure to Fulfill Information Obligation	KVKK md.18/1-a,10	85.437 TL - 1.709.200 TL
Failure to Fulfill Data Security Obligations	KVKK md.18/1-b,12	256.357 TL - 17.092.242 TL
Failure to Comply with Board Decisions	KVKK md.18/1-c,15	427.263 TL - 17.092.242 TL
Violation of VERBIS Registration and Notification Obligation	KVKK md.18/1-ç,16	341.809 TL - 17.092.242 TL
Failure to Notify the Institution of Standard Contracts within 5 Business Days	KVKK md.18/1-d,9	90.308 TL - 1.806.177 TL