The monthly bulletins of the Advertisement Board decisions, which are regularly published on the website of the Ministry of Trade, include some intriguing decisions in the March bulletin - especially for those offering goods/services through an online membership system. In general, some of the decisions are similar to those previously published by the Advertisement Board. However, there are certain decisions that focus on personal data, which raise the question of whether a new front is emerging in the protection of personal data. Before answering this question, a brief overview of the main ideas of these decisions and the evaluations of the Advertisement Board...
A. Main Ideas in the Decisions and Evaluations of the Advertisement Board
Although the Advertisement Board has included 12 decisions1 on this topic, essentially the same issues have been addressed in almost all the decisions. Therefore, we have focused on these common points in our explanations and compiled the main ideas to be drawn from these decisions as follows:
Main Idea | Evaluations of the Advertisement Board |
Offering an option to shop without membership |
|
Not forcing consent for targeted advertising and/or marketing practices and/or sending commercial communications |
If consumers' personal data will be processed for targeted advertising and/or marketing purposes, or if commercial electronic messages will be sent to consumers, they must be:
|
Providing an option to opt out of membership and/or not making membership cancellations difficult |
|
Not collecting personal data that is not related to becoming a member and/or provision of goods/services |
|
In all its decisions, the Advertisement Board has considered these
commercial practices as unfair commercial practices and has
therefore decided for them to be suspended and
rectified2 accordingly. The Advertisement Board settling
for issuing suspension and rectification decisions in almost all
its decisions on the subject -given that it has not conducted such
examinations before- should be considered as a serious warning for
the future.
B. Doesn't the Turkish Data Protection Authority Oversee These Matters?
As is known, the issues that have recently found a place in the decisions of the Advertisement Board have long been on the radar of the Turkish Data Protection Authority (the “DP Authority”), and the DP Authority has issued numerous violation decisions on these topics. Thus, it is a well-known fact that such practices are against the law. However, at this stage, questions such as "who has the authority to detect and penalize non-compliance" and "will two separate administrative authorities impose penalties for the same issue" have emerged.
When the establishment, authority, and duty areas are compared, personal data are located in the focal point of the DP Authority's field of work. On the other hand, the Advertisement Board's field of work focuses on consumer protection, regulation of commercial advertisements, and prevention of unfair commercial practices. Therefore, the current decisions indicate that the Advertisement Board interprets its own field of work to cover the instances where personal data is unlawfully processed. Indeed, careful examination of these decisions reveals that instead of the legislative jargon of the Data Protection Law, the Advertisement Board uses its own legislative jargon: Unfair Commercial Practice.
As it appears, the Advertisement Board has now indicated its active involvement in such unlawful situations.
C. Risk of Double Penalization
The outcome of the involvement of different administrative authorities, as briefly discussed above, is the risk of double penalization for the same conduct, whether it is called unfair commercial practice or unlawful processing of personal data.
This risk can be stated comparatively as follows:
Noncompliance | The DP Authority | Noncompliance | The Advertisement Board |
Failure to Fulfil the Disclosure Obligation (Obligation to Inform) |
|
Unfair Commercial Practice: Using methods on the internet such as deceptive interface designs, options, or statements that negatively affect consumers' decision-making ability or choice or aim to alter decisions they would give under normal circumstances in favour of the seller or provider. |
The Advertisement Board may impose these sanctions separately or together depending on the nature of the violation. If the violation has occurred nationwide, an administrative fine of TRY 550,059 (approx. EUR 15,800). |
Unlawful Processing of Personal Data (Breach of Data Security) |
|
D. How Should the Risk Be Calculated?
Per Article 15 of the Misdemeanours Law, if multiple misdemeanours are committed with one conduct, the highest of the administrative fines provided shall be applied. If the law also provides for other administrative sanctions for these misdemeanours, each of these sanctions shall be imposed.
If multiple misdemeanours stem from one conduct and this situation is evaluated by the same administrative authority, it is clear that the highest administrative fine will be imposed. However, the problem arises when the same conduct is examined by more than one administrative authority. For example, considering the ex officio investigation powers of the DP Authority, what should be the assessment if the DP Authority acts upon these decisions as a denunciation? Or else, what interpretation can be made if the administrative authorities are unaware of each other? The answers to these questions remain unclear. Therefore, when calculating the risks arising from such practices, the total of the risks indicated in the table above should be considered.
Conclusion
On a final note, such practices are increasingly falling under the radar of more regulatory and supervisory administrative authorities. Therefore, it is important for those offering goods and/or services online to review their membership systems in line with the Advertisement Board decisions and complete their compliance processes as soon as possible.
Footnotes
1. These decisions are from the case files numbered 2023/149, 2023/150, 2023/151, 2023/152, 2023/153, 2023/326, 2023/327, 2023/328, 2023/329, 2024/2262, 2024/2263, and 2024/2266.
2. In addition to the decision to suspend and rectify, the Advertisement Board has also decided to impose an administrative fine of TRY 347,128 (approx. EUR 9,970) on only one of these decisions. However, upon examining this decision, it is evident that similar findings to those in the other decisions have been made. Therefore, it is not understood from the text of the decision why this decision did not suffice with the suspension and rectification order as in the other decisions. (File No: 2024/2262)
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.
We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.