FTC INVESTIGATIONS REGARDING THE COLLECTION AND PROCESSING OF LOCATION DATA WITH MOBILE DEVICES IN THE UNITED STATES OF AMERICA AND DEVELOPMENTS REGARDING LOCATION DATA IN OUR COUNTRY

Yıl 2024, Cilt: 10 Sayı: 1, 63 - 78

Mükerrem Onur Başar

https://doi.org/10.55027/tfm.1379944

Öz

ABSTRACT
In the face of new technological developments, location data collected especially with mobile devices and the processing of this data have become an important issue. Nowadays, as technology develops rapidly, people's engagement with their mobile devices increases day by day. In the United States of America, a society dominated by liberal economic understanding and consumption, identifying the habits of consumers is very important. Because, it is of great importance that the advertisement reaches the right target in advertising expenditures; personal data and the analysis of these data have a very important role in reaching the right target audience for advertising and marketing activities. At this point, by collecting and processing people's location data via mobile devices, it is ensured that advertising and marketing activities are delivered to the correct target audience.
In the United States of America, unlike our country's regulations and the European Union regulations, there is no central regulatory authority for the protection of personal data on federal level, and the FTC (Federal Trade Commission), which is equipped with executive powers and has duties as a sanctioning authority on many different issues, is effective in handling and regulating the issue. In response to new technological developments, the FTC has conducted a number of investigations, especially regarding location data collected via mobile devices. It is a realistic expectation that similar issues addressed in these investigations will be addressed at the level of our country as well. Our article covers developments regarding location data and recent FTC investigations into the collection and processing of location data in the United States and our country.

Anahtar Kelimeler

Personal Data, Location Data, Federal Trade Comission, Collection and Process of Location Data

AMERİKA BİRLEŞİK DEVLETLERİ’NDE MOBİL CİHAZLARLA KONUM VERİSİNİN TOPLANMASI VE İŞLENMESİNE İLİŞKİN FTC SORUŞTURMALARI VE ÜLKEMİZDE KONUM VERİSİ İLE İLGİLİ GELİŞMELER

Öz

ÖZ
Yeni gelişen teknolojik gelişmeler karşısında özellikle mobil cihazlarla toplanan konum verisi ve bu verinin işlenmesi önemli bir meseleyi oluşturmaktadır. Teknolojinin süratle geliştiği günümüzde kişilerin mobil cihazları ile angajmanları da her geçen gün artmaktadır. Liberal ekonomik anlayışın ve tüketimin egemen olduğu bir toplum olan Amerika Birleşik Devletleri’nde tüketicilerin alışkanlıklarının tayini ve tespiti oldukça önem taşımaktadır. Zira, reklam harcamalarında reklamın doğru hedefe ulaşması büyük önem taşımakta olup; reklam ve pazarlama faaliyetlerinin doğru hedef kitlesine ulaşmasında kişisel veriler ve bu verilerin analizi oldukça önemli bir yer tutmaktadır. İşte bu noktada mobil cihazlarla kişilerin konum verisinin toplanıp işlenmesi suretiyle, reklam ve pazarlama faaliyetlerinin doğru hedef kitlesine ulaştırılması temin edilmektedir.

Amerika Birleşik Devletleri’nde ülkemiz düzenlemelerinden ve Avrupa Birliği düzenlemelerinden farklı olarak kişisel verilerin korunmasına yönelik federal düzeyde düzenleyici merkezi bir idari otorite bulunmamakta olup, icrai yetkiler ile donatılmış ve yaptırım makamı olarak birçok farklı konuda görevi bulunan FTC (Federal Trade Commission) konunun ele alınmasında ve düzenlenmesinde etkin bir rol oynamaktadır. FTC, yeni gelişen teknolojik gelişmeler karşısında özellikle mobil cihazlarla toplanan konum verisine ilişkin olarak birtakım soruşturmalarda bulunmuştur. Bu soruşturmalar ile ele alınan benzeri konu ve hassasiyetlerin ülkemiz düzleminde de ele alınması gerçekçi bir beklentiyi oluşturmaktadır. Makalemizde konum verisi ile ilgili olarak ülkemizdeki gelişmelere ve Amerika Birleşik Devletleri’nde toplanması ve işlenmesine dair yakın geçmişteki FTC soruşturmalarına yer verilmiştir.

Anahtar Kelimeler

Kişisel Veri, Konum Verisi, Federal Ticaret Komisyonu, Konum Verisinin Toplanması ve İşlenmesi

Kaynakça

• Akkanat-Öztürk, Elif Beyza (2022) Karşı Edim Olarak Kişisel Veriler, İstanbul, Oniki Levha.
• Anandarajan, Murugan & D’Ovidio, Rob & Alexander, Jenkins (2013), ‘Safeguarding Consumers against Identity-related Fraud: Examining Data Breach Notification Legislation Through the Lens of Routine Activities Theory’ International Data Privacy Law, S: 3, C:1, s. 54.
• Aşıkoğlu, Şehriban İpek (2018) Avrupa Birliği ve Türk Hukukunda Kişisel Verilerin Korunması ve Büyük Veri, İstanbul, On İki Levha.
• Ayözger-Öngün, Çiğdem (2019) Kişisel Verilerin Korunması Hukuku, 2. Baskı, İstanbul, Beta.
• Başalp, Nilgün (2004) Kişisel Verilerin Korunması ve Saklanması, İstanbul, Yetkin Yayınları.
• Keser-Berber, Leyla (2014) Çevrimiçi Davranışsal Reklamcılık (Online Behavioral Advertising) Uygulamaları Özelinde Kişisel Verilerin Korunması, İstanbul, On İki Levha.
• Brill, Julie, ‘The Intersection of Privacy and Consumer Protection’: Selinger, Evan & Polonetsky, Jules & Tene, Omer (Editörler) (2018) The Cambridge Handbook of Consumer Privacy, 1. Baskı, Cambridge, Cambridge University Press, s. 355-365.
• Bygrave, Lee A. (2017), ‘Data Protection by Design and by Default: Deciphering the EU's Legislative Requirements’ Oslo Law Review, S: 4, C:2, s. 105-120.
• Çekin Serdar, Mesut (2020) Avrupa Birliği Hukukuyla Mukayeseli Olarak 6698 Sayılı Kanun Çerçevesinde Kişisel Verilerin Korunması Hukuku, 3. Baskı, İstanbul, On İki Levha.
• Çelikel, Serdar (2022) Veri Sorumlusu ve Veri Sorumlusunun Yükümlülükleri, İstanbul, Seçkin.
• Cottrill, Caitlin D. & Thakuriah, Piyushimita Vonu (2014), ‘Privacy in Context: an Evaluation of Policy-Based Approaches to Location Privacy Protection’ International Journal of Law and Information Technology, S:22, C:2, s. 178-207.
• Dülger, Volkan (2020) Kişisel Verilerin Korunması Hukuku, 3. Baskı, İstanbul, Hukuk Akademisi.
• Fong, Adrian (2017), ‘The Role of App Intermediaries in Protecting Data Privacy’ International Journal of Law and Information Technology, S:25, C:2, s.85-114.
• Jasmontaite, Lina & Kamara, Irene & Zanfir-Fortuna, Gabriela & Leucci, Stefano (2018), ‘Data Protection by Design and by Default’ European Data Protection Law Review, S:4, C:2 s. 168-189.
• Kulular İbrahim, Merve Ayşegül (2021), ‘Psikolojik Planlı Eskitme ve Covid 19 Pandemisinde Durum’ Türkiye Adalet Akademisi Dergisi, S:47, C:2, s.391-406.
• Kirsten, Martin & Shilton, Katie, ‘Mobile Privacy Expectations: How Privacy Is Respected with Mobile Devices’: Selinger, Evan & Polonetsky, Jules & & Tene, Omer (Editörler) (2018) The Cambridge Handbook of Consumer Privacy, 1. Baskı, Cambridge, Cambridge University Press, s. 85-102.
• Kulesza, Joanna (2013), ‘International Law Challenges to Location Privacy Protection’ International Data Privacy Law, S: 3, C: 3, s. 158-169.
• Küzeci, Elif (2018) Kişisel Verilerin Korunması, 2. Baskı, İstanbul, Turhan Kitapevi. Lipman, Rebecca (2016), ‘Online Privacy and the Invisible Market for Our Data’ Dickinson Law Review, S:120, C:3, s. 777-806.
• Mantelero, Alessandro & Vaciago, Giuseppe & Samantha Esposito, Maria & Monte, Nicole (2020), ‘The Common EU Approach to Personal Data and Cybersecurity Regulation’ International Journal of Law and Information Technology, S: 28, C: 4, s. 297-328.
• Métayer, Daniel Le, ‘Privacy by Design: A Matter of Choice’: Gutwirth, Serge & Poullet, Yves & De Hert, Paul (Editörler) (2010) Data Protection in a Profiled World, 1. Baskı, Springer Dordrecht, s. 323-334. Naher, Nazmun & Hashem, Tanzima (2019), ‘Think Ahead: Enabling Continuous Sharing of Location Data in Real-Time with Privacy Guarantee’ The Computer Journal, S:62, C:1, s. 1-19.
• Parlak, Mete Ogün (2018), ‘Yeni Medya ve Haberciliğin Dönüşümü’ Ufuk Üniversitesi Sosyal Bilimler Enstitüsü Dergisi S:7, C: 14, s. 59-82.
• Rachovitsa, Adamantia (2016), ‘Engineering and Lawyering Privacy by Design: Understanding Online Privacy Both as a Technical and an International Human Rights Issue’ International Journal of Law and Information Technology, S: 24, C: 4, s. 374-399.
• Raphaël, Gellert (2015), ‘Data Protection: a Risk Regulation? Between the Risk Management of Everything and the Precautionary Alternative’ International Data Privacy Law, S: 5, C:1, s. 3-19.
• Rubinstein, Ira (2013), ‘Big Data: The End of Privacy or a New Beginning?’ International Data Privacy Law, S: 3, C:2, s. 74-87.
• Sweeney, Latanya (2002), ‘k-Anonymity: a Model For Protecting Privacy’ International Journal of Uncertainty Fuzziness and Knowledge-Based Systems, S:10, C:5, s.557-570.
• Turan, Metin (2019) Karşılaştırmalı Hukukta Kişisel Verilerin Korunması, 2. Baskı, Ankara, Seçkin.
• Online Kaynaklar
• Apple Inc., About privacy and Location Services in iOS, iPadOS, and watchOS < https://support.apple.com/en-us/102515 ˃ s.e.t. 12 Aralık 2023
• Blumberg, Andrew J. & Eckersley, Peter (2009) ‘On Locational Privacy, and How to Avoid Losing it Forever’ <https://www.eff.org/files/eff-locational-privacy.pdf˃ s.e.t. 3 Nisan 2023. Children’s Online Privacy Protection Act, <http://uscode.house.gov/view.xhtml?req=granuleid%3AUSC-prelim-title15-section6501&edition=prelim˃ s.e.t. 17 Mart 2023.
• European Data Protection Board, Guidelines 4/2019 on Article 25 Data Protection by Design and by Default Version 2.0 <https://edpb.europa.eu/sites/default/files/files/file1/edpb_guidelines_201904_dataprotection_by_design_and_by_default_v2.0_en.pdf˃ s.e.t. 19 Mart 2023. Fair Credit Reporting Act, <https://www.ftc.gov/legallibrary/browse/statutes/fair-credit-reporting-act ˃ s.e.t. 17 Şubat 2023.
• Fair, Lesley, FTC Says Data Broker Sold Consumers’ Precise Geolocation, Including Presence at Sensitive Healthcare Facilities, <https://www.ftc.gov/business-guidance/blog/2022/08/ftc-says-data-broker-sold-consumers-precise-geolocation-including-presence-sensitive-healthcare˃ s.e.t. 13 Mart 2023.
• Federal Trade Commission, FTC Sues Kochava for Selling Data that Tracks People at Reproductive Health Clinics, Places of Worship, and Other Sensitive Locations <https://www.ftc.gov/news-events/news/press-releases/2022/08/ftc-sues-kochava-selling-data-tracks-people-reproductive-health-clinics-places-worship-other˃ s.e.t. 21 Mart 2023.
• Federal Trade Commission, Marketing Your Mobile App: https://www.bulkorder.ftc.gov/publications/marketing-your-mobile-app-get-it-right-start,˃ s.e.t. 20 Mayıs 2023.
• Federal Trade Commission, Protecting Consumer Privacy in an Era of Rapid Change <https://www.ftc.gov/reports/protecting-consumer-privacy-era-rapid-change-recommendations-businesses-policymakers˃ s.e.t. 10 Mart 2023.
• Gramm Leach Billey Act, <https://www.congress.gov/bill/106thcongress/senate-bill/900/text˃ s.e.t. 4 Nisan 2023.
• Health Insurance Portability and Accountability Act, <https://aspe.hhs.gov/reports/health-insurance-portability-accountability-act-1996˃ s.e.t. 5 Nisan 2023.
• Kişisel Verileri Koruma Kurulu, Kamuoyu Duyurusu Covid-19 ile Mücadelede Konum Verisinin İşlenmesi ve Kişilerin Hareketliklerinin İzlenmesi Hakkında Bilinmesi Gerekenler, <https://www.kvkk.gov.tr/Icerik/6726/Covid-19-ile-Mucadelede-Konum-Verisinin-Islenmesi-ve-Kisilerin-Hareketliklerinin-Izlenmesi-Hahkkinda-Bilinmesi-Gerekenler-2-˃ s.e.t. 15 Eylül 2023.
• Organization for Economic Co-operation and Development, OECD Guidelines on the Protection of Privacy and Transborder Flows of Personal Data, OECD Publishing, Paris, <https://doi.org/10.1787/9789264196391-en. ˃ s.e.t. 1 Nisan 2023.
• Schwartz, Adam, FTC Sues Location Data Broker, <https://www.eff.org/deeplinks/2022/09/ftc-sues-location-data-broker˃ s.e.t. 3 Nisan 2023.
• Should the U.S. Adopt European-Style Data-Privacy Protections?, Wall Street Journal, 8 March 2013 <https://www.wsj.com/articles/SB10001424127887324338604578328393797127094˃; s.e.t. 31 Mart 2023 Telemarketing Sales Rule, <https://www.federalregister.gov/regulations/3084-AA98/telemarketing-sales-rule˃ s.e.t. 17 Mart 2023.
• Tressler, Colleen, Mobile Phone Maker Misled People on Privacy & Security <https://consumer.ftc.gov/consumer-alerts/2018/04/mobile-phone-maker-misled-people-privacy-security˃ s.e.t. 27 Mart 2023. Thurm, Scott & Kane, Yukari, Iwatani Your Apps are Watching You The Wall Street Journal (2010) <http://online.wsj.com/article/SB10001424052748704694004576020083703574602.html> s.e.t. 1 Eylül 2023. Your Android Privacy on Your Terms, < https://www.android.com/safety/privacy/ ˃ s.e.t. 12 Aralık 2023 World Economic Forum & Bain Company, Personal Data: The Emergence of a New Asset Class <https://www3.weforum.org/docs/WEF_ITTC_PersonalDataNewAsset_Report_2011.pdf˃ s.e.t. 3 Mart 2023
• World Economic Forum, Rethinking Personal Data: A New Lens for Strengthening Trust <https://www3.weforum.org/docs/WEF_RethinkingPersonalData_ANewLens_Report_2014.pdf˃ s.e.t. 4 Nisan 2023.
• FTC Soruşturmaları FTC v. Facebook Inc. Docket No: 0913284 <https://www.ftc.gov/sites/default/files/documents/cases/2011/11/111129facebookcmpt.pdf˃ s.e.t. 17 Mart 2023 FTC v. Goldenshores Technologies, LLC, and Erik M. Geidl Docket No. C-4446 <https://www.ftc.gov/system/files/documents/cases/140409goldenshorescmpt.pdf˃ s.e.t. 17 Mart 2023 FTC v. Google Inc. Docket No: C-4336 <https://www.ftc.gov/sites/default/files/documents/cases/2011/10/111024googlebuzzcmpt.pdf˃ s.e.t. 17 Mart 2023. FTC v. InMobi Pte Ltd. Docket No. 3:16-cv-3474 <https://www.ftc.gov/system/files/documents/cases/160622inmobicmpt.pdf˃ s.e.t. 17 Mart 2023. FTC v Kochava, Inc. Docket No. 2:22-cv-377<https://www.ftc.gov/system/files/ftc_gov/pdf/1.%20Complaint.pdf˃ s.e.t. 17 Mart 2023