According to KVKK's decision, an ex officio investigation was opened into allegations that the personal data and privacy of underage users were violated as private Instagram accounts opened by users under 18 were converted into business accounts and publicly accessible and personally accessible to children. Data has been made accessible to everyone.
As a result of the review, it was found that child users “have become vulnerable to risks in the online environment” because the email address and phone number information in Instagram business accounts are contained in Instagram's HTML source code and this information can be used by anyone can be recorded.
KVKK found that Meta as a data controller was insufficient to adopt technical measures to ensure data security and concluded that making children's personal data accessible to everyone could have a negative impact on children.
KVKK imposed an administrative penalty of 2 million 500,000 lira on Meta for failing to take the necessary technical and administrative measures to ensure data security and for failing to comply with its reporting obligations within the framework of the relevant legal provisions.
An administrative penalty of 9 million lira was imposed on Meta for not questioning the age criteria when converting the secret Instagram accounts of child users into business accounts and for failing to take measures to switch to business accounts with the knowledge and control of the Parents.
Therefore, an administrative fine totaling 11 million 500 thousand liras was imposed on Meta, which has more than 50 million users in Turkey.
Bir yanıt yazın