KVKK launched an ex officio investigation upon allegations of a data leak of approximately 125 GB on Twitch.
As a result of the investigation, KVKK determined that the data controller did not show sufficient care in applying the configurations that would eliminate the problems in the system, and determined that the security measures that should have been taken before the violation occurred were taken after the data breach, and that the identification of risks and threats was inadequate.
It was determined that 35 thousand 274 people living in Turkey were affected by the violation.
KVKK fined Twitch a total of 1 million 750 thousand liras for “acting against the obligation to take the necessary technical and administrative measures to ensure the appropriate level of security in order to prevent unlawful processing of personal data” and 250 thousand liras for not notifying about the data breach. It was decided to impose an administrative fine of 2 million lira.
What do you think?