09.07.2026 12:50
The Ministry of National Education sent a 10-item instruction to all provinces regarding measures to be taken for the protection of personal data. Content containing personal data on websites, social media accounts, and online platforms of schools, institutions, and units cannot be shared publicly. Previously published content on these platforms will also be reviewed, and content containing personal data will be removed from public access.
The Ministry of National Education (MoNE) instructed that websites, social media accounts, and online platforms of schools, institutions, and units be reviewed and content containing personal data be removed. The Ministry sent a 10-article letter to all provinces regarding measures to be taken for the protection of personal data.
KVKK WARNING
The letter stated that personal data of students, parents, teachers, personnel, and other relevant parties are processed during business and operations carried out in central and provincial organizations and educational institutions, emphasizing the importance of protecting data in accordance with the Personal Data Protection Law (KVKK) and related legislation.
The letter reported that personal data should only be processed in line with the requirements of duties and services, for specific and legitimate purposes, limited to the transaction performed, without collecting excessive data, maintaining data currency, and implementing necessary measures against unauthorized access.
In line with the measures to be taken within this scope, content containing personal data on websites, social media accounts, and online platforms of schools, institutions, and units may not be shared publicly.
METHODS WITHOUT PERSONAL DATA WILL BE USED IN ANNOUNCEMENTS AND SHARES
Student class lists, student numbers, Turkish ID numbers, exam lists, attendance and achievement information, health information, disciplinary information, parent information, personnel contact information, and photographs, videos, and similar content of students and personnel may not be published on school and institution websites, social media accounts, or online platforms.
OLD CONTENT WILL ALSO BE REMOVED
Previously published lists, documents, photographs, videos, announcements, and files containing personal data on these platforms will be reviewed by school or institution directors, and content containing personal data will be removed from public access.
In cases where photography and video recording or sharing are necessary within educational activities, the purpose of recording and sharing, the environment where sharing will occur, the storage period, and who can access it will be determined in advance.
Sensitivity will be shown in sharing images of students, methods without personal data will be used in announcements and shares, and situations requiring personal data processing will be evaluated within the framework of KVKK and related legislation.
ADMINISTRATIVE AND LEGAL PROCESS WILL BE CONDUCTED FOR UNAUTHORIZED ACTIONS
School administrators, teachers, and relevant personnel will be encouraged to participate in the "Personal Data Protection in Educational Institutions Training Course" and "Information Security Awareness Training Course" on the Teacher Information Network (ÖBA) platform to increase awareness of personal data protection and information security.
Additionally, it is necessary that access information such as username, password, verification code, and similar used to access the Ministry's systems should not be shared with third parties, and unauthorized third-party software, bots, macros, automation tools, browser extensions, unauthorized integrations, data scraping or data transfer tools, and similar applications should not be used.
It is important that usernames, passwords, and verification information are not entered into such software, and there should be no attempts to collect, transfer, or process data en masse without authorization through the Ministry's systems.
If unauthorized access, unauthorized data processing, data transfer, password sharing, or use of unauthorized third-party software is detected in the Ministry's information systems, administrative and legal processes will be conducted.
Cases of personal data breach, unauthorized access, sending data to the wrong person, use of suspicious software, password sharing, or publication of personal data on a website must be reported to the school or institution director and the relevant unit.