According to the KVKK decision, a car rental company customer was redirected to another user's account when he logged in to the company's website using the username and email address registered in the system.
The person who accessed the personal information of the person to whom he was referred, such as address, telephone number, TR ID number and driver's license information, stated that his information could also be accessed by others and filed a complaint the KVKK Take the necessary measures within the framework of the Law on Personal Data Protection No. 6698.
As a result of its investigation, KVKK found that platform users had access to the personal data of various users due to the incorrect functioning of the algorithm in the data collection system of the data responsible car rental company.
KVKK found that the company in question failed to comply with its data security obligations and that other persons could unlawfully access personal data, and imposed an administrative penalty of 200,000 lira on the company in question.
Bir yanıt yazın