Turkish Data Protection Fines & Decisions (KVKK)

Decisions of Turkey's data protection authority, the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu, KVKK), as clean, structured JSON: administrative fines in Turkish lira, which KVKK articles were breached, the sector, how the case started (breach notification, complaint or ex officio investigation), the topics involved and every other measure the Board ordered, with English labels.

The KVKK publishes its decision summaries (Kurul Karar Özetleri) only in Turkish, as long free text, in no particular order. This Actor collects every published summary (more than 300, from 2018 to 2026, about half of them with a fine), sorts them by decision date and turns each one into a record you can filter, count and feed into your tools. Think of it as a GDPR enforcement tracker for Türkiye.

Built for privacy and compliance teams, DPOs, law firms advising on Turkish data protection law, legal-tech and RegTech products, researchers, journalists and AI agents.

What you get

Field	Example
decisionDate / decisionNo	2024-12-26 / 2024/2196
publishedDate	when the summary was published
subjectTr	the Board's own subject line, in Turkish
sectors	["manufacturing & industry"], ["banking"], ["healthcare & pharma"] …
caseOrigin	breach notification, complaint, ex officio investigation or request for opinion
fineImposed / totalFineTL	true / 250000 (null when the summary does not give the amount)
fines	each fine separately: {"amountTL": 75000, "lawArticle": "KVKK 18(1)(b)", "obligation": "data security", "article": 12}
articlesBreached	KVKK articles behind the fines, e.g. [10, 12]
articlesCited	all KVKK articles cited in the decision, with English names
outcome	administrative fine, instructions / corrective order, reminder / warning, referred to prosecutor, no violation found, outside the scope of the law, no action, investigation opened, opinion / other decision
instructionsIssued, noActionTaken, outsideScope, referredToProsecutor	the same as booleans
topics	CCTV / video surveillance, biometric data, direct marketing, cookies, ransomware, international transfers, employment, children, credit reporting …
namedOrganizations	companies named in the title or subject (most decisions are anonymised; a few, such as TikTok or Yemeksepeti, are named)
decisionTr	the Board's assessment and decision, in Turkish
factsTr, fullText	the facts section and the full summary text
titleEn, summaryEn	optional English headline and summary
url	link to the official summary

How to use it

• Latest decisions: the default input returns the 10 most recent decisions.
• The whole database: set Max decisions to 0 to get every published summary in one run (about 15 minutes).
• Fines only: tick Only decisions with a fine, or set Minimum total fine (TL), e.g. 1,000,000.
• By topic or sector: use Keywords with Turkish words, e.g. banka (bank), kamera (camera), çerez (cookie), parmak izi (fingerprint), fidye (ransomware), or filter the dataset on topics and sectors.
• Breach enforcement: set Case origin to Data breach notification to see how the Board fines companies after a breach.
• Monitoring: schedule the Actor weekly with Decision date from set to a recent date to get new decisions as they are published.
• English: add your own OpenAI API key for English headlines and summaries. The key is stored as a secret input and is only sent to OpenAI.

Example input

{
  "maxItems": 0,
  "onlyWithFines": true,
  "decisionDateFrom": "2023-01-01"
}

Use with AI agents (MCP)

Works as a tool for AI agents through the Apify MCP server: ask "What fines has the Turkish data protection authority imposed for CCTV in the workplace?" or "How much does KVKK typically fine a company after a ransomware breach?" and let your agent call this Actor.

Pricing

Pay per result: you are charged per decision returned. Use Max decisions and the filters to control cost.

The KVKK website usually only answers Turkish IP addresses, so the Actor uses a Turkish residential proxy by default. Its cost is included in the price.

Data source and legal note

All data comes from the official website of the Turkish Personal Data Protection Authority, kvkk.gov.tr, which publishes these decision summaries to inform the public. Each record links to the official summary. The summaries are anonymised by the authority and this Actor does not add any personal data. Fields such as fines, articles, sectors and topics are extracted automatically and English labels are not official translations; rely on the original text for legal purposes. This Actor is not affiliated with the KVKK and does not give legal advice.