"Record fine from Turkey to Instagram"

According to the decision of the Personal Data Protection Authority, an investigation was initiated ex officio due to allegations that the personal data and privacy of child users were violated, as it allowed secret Instagram accounts opened by users under the age of 18 to be converted into business accounts and made public, making children's personal data accessible to everyone.

"CHILDREN HAVE BEEN LEFT VULNERABLE TO RISKS"

As a result of the investigation, it was determined that the email address and phone number information in Instagram business accounts were present in Instagram's HTML source code, making this information collectible by anyone, which left child users "vulnerable to risks in the online environment."

The KVKK stated that Meta, as the data controller, was insufficient in taking technical measures to ensure data security and determined that the accessibility of children's personal data to everyone could have negative effects on children.

2.5 MILLION TL FINE FOR META

The KVKK imposed an administrative fine of 2.5 million lira on Meta for failing to take the necessary technical and administrative measures to ensure data security and for not fulfilling the notification obligation under the relevant legal regulations.

Additionally, due to the lack of any measures taken so far regarding the questioning of age criteria in the process of converting secret Instagram accounts of child users into business accounts and the transition to business accounts without the knowledge and control of parents, Meta was fined 9 million lira.

Thus, a total administrative fine of 11.5 million lira was imposed on Meta, which has more than 50 million users in Turkey.