Assessment of The Personal Data Protectıon Board's Decision on A Data Breach Committed by an Airline Company

Ayşe Yiğit Şakar; Duygu Arda

doi:10.30518/jav.1770648

Assessment of The Personal Data Protectıon Board's Decision on A Data Breach Committed by an Airline Company

Abstract

Today, the increase in technological developments has led to both the inclusion of information in various fields within the scope of personal data and the expansion of the scope of processing of personal data accordingly. In order to protect personal data and prevent violations, a legal basis has been tried to be established in both national and international legislation. While the legislation aims to protect the right to privacy, it also aims to regulate and supervise data processing activities and to prevent violations of the law. The Personal Data Protection Board is an independent authority that serves this purpose by supervising the lawful activities of data controllers. In its decision dated 03.08.2023 and numbered 2023/1309, the Board evaluated the complaint regarding the data breach of an airline company. The incident concerned a passenger's ability to view the identity and travel documents of other persons. The fact that the data of the data subjects was accessible by third parties shows that technical and administrative measures were not taken. The decision on this case, which demonstrates the importance of the legal obligations of data controllers and that violations can lead to serious sanctions, is very important in terms of improving data protection mechanisms and protecting the rights of individuals.

Keywords

References

Akgül, A. (2016). Protection of personal data in the light of the decisions of the Council of State and the European Court of Human Rights (2nd ed.).
Akkurt, S. S. (2020). A comparative perspective on approaches to the legal nature of the concept of personal data. Journal of Personal Data Protection, 2(1).
Aksoy, H. C. (2016). Protection of personal data. Çakmak Publishing House.
Aşıkoğlu, Ş. İ. (2018). Protection of personal data and big data in European Union and Turkish law (2nd ed.). On İki Levha Publications.
Aşikoğlu, Ş. İ. (2023). In P. Ç. Aksoy & H. C. Aksoy (Eds.), The right to protection of personal data: An academic perspective on the protection of personal data (pp. 19 et seq.). KVKK Akademi. https://www.kvkk.gov.tr (Date of access: 02.01.2025)
Banisar, D., & Davies, S. (1999). Privacy and human rights: An international survey of privacy laws and practice. Global Internet Liberty Campaign.
Bilir, F. (2023). The emergence of practices and legal regulations on the protection of personal data. Journal of Justice, 71.
Canbay, Y. (2023). Deletion, destruction or anonymization of personal data. In P. Ç. Aksoy & H. C. Aksoy (Eds.), The right to protection of personal data: An academic perspective on the protection of personal data.

Constitutional Court. Decisions Information Bank, https://kararlarbilgibankasi.anayasa.gov.tr. Access Date: Constitutional Court. Decisions Information Bank, (CC, E.2014/74, J.2014/201, 25/12/2014; E.2014/180, J.2015/30, 19/3/2015); Access date: 22.01.2025; CC,E.2014/122,J.2015/123,30/12/2015; access date: 18.04.2025; E.2014/74, J.2014/201, 25/12/2014; E.2014/180, J.2015/30, 19/3/2015).
Dülger, M. V. (2020). Personal data protection law. Law Academy.
Ersoy Kekevi, Ç. (2023). General concepts. In P. Ç. Aksoy & H. C. Aksoy (Eds.), The right to protection of personal data: An academic overview of personal data protection.
International Civil Aviation Organization, Erişim Tarihi: https://www.icao.int/Security/FAL/ANNEX9/Documents/9944_cons_en.pdf.
Jain, P., Gyanchandani, M., & Khare, N. (2016). Big data privacy: A technological perspective and review. Journal of Big Data, 3(1).
Kişisel Verileri Koruma Kurumu. Kişisel Verilerin Korunması Kanunu ve ilgili bilgiler, Erişim Tarihi: www.kvkk.gov.tr
Küzeci, E. (2020). Protection of personal data (4th ed.). Twelve Plate Publications.
Küzeci, E. (2023). The right to protection of personal data. In P. Ç. Aksoy & H. C. Aksoy (Eds.), The right to protection of personal data: An academic perspective on the protection of personal data.
Oğuz, S. (2018). General principles of personal data protection law. Journal of Information Economics and Management, 13(2).
Turan Başara, G. (2020). Personal data processing contract. Journal of the Court of Dispute, 8(16).
Us Doğan, E. (2023). “Application and complaint procedures and the obligation to fulfill board decisions”. In P. Ç. Aksoy & H. C. Aksoy (Eds.), The right to protection of personal data: An academic perspective on the protection of personal data (p. 238). https://www.kvkk.gov.
Warren, S. D., & Brandeis, L. D. (1890). The right to privacy. Harvard Law Review, 4(5), 193–220.
Yücedağ, N. (2019). General principles within the scope of personal data protection law. Journal of Personal Data Protection, 1(1).

Details

Primary Language

English

Subjects

Law and Economy, Air Transportation and Freight Services

Journal Section

Research Article

Authors

Ayşe Yiğit Şakar ^*
0000-0002-1432-9398
Türkiye

Duygu Arda
0000-0003-0695-4908
Türkiye

Early Pub Date

February 26, 2026

Publication Date

February 26, 2026

Submission Date

August 22, 2025

Acceptance Date

February 21, 2026

Published in Issue

Year 2026 Volume: 10 Number: 1

DOI

https://doi.org/10.30518/jav.1770648

IZ

https://izlik.org/JA85PR89HF

Cite

RIS / Bibtex

APA

Yiğit Şakar, A., & Arda, D. (2026). Assessment of The Personal Data Protectıon Board’s Decision on A Data Breach Committed by an Airline Company. Journal of Aviation, 10(1), 71-76. https://doi.org/10.30518/jav.1770648

AMA

1.Yiğit Şakar A, Arda D. Assessment of The Personal Data Protectıon Board’s Decision on A Data Breach Committed by an Airline Company. JAV. 2026;10(1):71-76. doi:10.30518/jav.1770648

Chicago

Yiğit Şakar, Ayşe, and Duygu Arda. 2026. “Assessment of The Personal Data Protectıon Board’s Decision on A Data Breach Committed by an Airline Company”. Journal of Aviation 10 (1): 71-76. https://doi.org/10.30518/jav.1770648.

EndNote

Yiğit Şakar A, Arda D (February 1, 2026) Assessment of The Personal Data Protectıon Board’s Decision on A Data Breach Committed by an Airline Company. Journal of Aviation 10 1 71–76.

IEEE

[1]A. Yiğit Şakar and D. Arda, “Assessment of The Personal Data Protectıon Board’s Decision on A Data Breach Committed by an Airline Company”, JAV, vol. 10, no. 1, pp. 71–76, Feb. 2026, doi: 10.30518/jav.1770648.

ISNAD

Yiğit Şakar, Ayşe - Arda, Duygu. “Assessment of The Personal Data Protectıon Board’s Decision on A Data Breach Committed by an Airline Company”. Journal of Aviation 10/1 (February 1, 2026): 71-76. https://doi.org/10.30518/jav.1770648.

JAMA

1.Yiğit Şakar A, Arda D. Assessment of The Personal Data Protectıon Board’s Decision on A Data Breach Committed by an Airline Company. JAV. 2026;10:71–76.

MLA

Yiğit Şakar, Ayşe, and Duygu Arda. “Assessment of The Personal Data Protectıon Board’s Decision on A Data Breach Committed by an Airline Company”. Journal of Aviation, vol. 10, no. 1, Feb. 2026, pp. 71-76, doi:10.30518/jav.1770648.

Vancouver

1.Ayşe Yiğit Şakar, Duygu Arda. Assessment of The Personal Data Protectıon Board’s Decision on A Data Breach Committed by an Airline Company. JAV. 2026 Feb. 1;10(1):71-6. doi:10.30518/jav.1770648