The Turkish Personal Data Protection Board imposed an administrative fine of TRL 250,000 against an employer following a complaint from an employee. The employee alleged that the employer did not provide the necessary information for the processing and storage of the personal data; made it obligatory for all employees to provide their fingerprint data but did obtain explicit consent; and more. How did the Board respond?
