Article 18 of the Law No. 6698 on the Protection of Personal Data (“KVKK”), titled “Misdemeanors”, regulates the administrative fines to be imposed on those who fail to fulfill the obligations arising from the Law.
The administrative fines applicable to those who fail to comply with their obligations under the KVKK have been increased in line with the revaluation rate and were announced on the website of the Personal Data Protection Authority on 31 December 2025.
Accordingly, the administrative fines to be applied in 2026 are as follows:
| Legal Basis (KVKK Article) | Description | 2026 Administrative Fine Amount (TRY) |
|---|---|---|
| Article 10 | Failure to fulfill the obligation to inform (data subjects) | 85,437 – 1,709,200 |
| Article 12 | Failure to fulfill obligations regarding data security | 256,357 – 17,092,242 |
| Article 15 | Failure to comply with the decisions of the Board | 427,263 – 17,092,242 |
| Article 16 | Acting in violation of the obligation to register and notify to the Data Controllers Registry (VERBIS) | 341,809 – 17,092,242 |
| Article 9 | Failure to fulfill the notification obligation stipulated in Article 9/5 | 90,308 – 1,806,177 |
The table showing the amounts increased according to the revaluation rates announced for the years 2017–2026 can be accessed via the following link: https://www.kvkk.gov.tr/SharedFolderServer/CMSFiles/MTY5NTUyNTRkNDkxNGY.pdf
Kind regards,
DKND Law Office
