Mandatory explicit consent penalty from KVKK on in-flight internet
The Personal Data Protection Authority ruled that it is unlawful to obtain mandatory explicit consent for internet use on the plane.
Quick Look
- KVKK found it unlawful to require explicit consent for the processing of personal data for internet use on the plane.
- An administrative fine of 90 thousand liras was imposed on the internet service provider.
AI-generated summary
Why It Matters
KVKK investigates complaints about practices contrary to the personal data protection law.
In the KVKK's decision, it was noted that the practice of requiring explicit consent for the processing of data for internet use on the plane violates the principle of "compliance with the law and the rules of honesty".
According to KVKK's decision, a passenger who wants to use in-flight internet is required to give explicit consent for the processing of his personal data. The passenger, who did not want his data to be processed and objected to the application, filed a complaint with KVKK.
Evaluating the complaint, KVKK determined that it was the internet service provider, not the airline company, who illegally requested explicit consent and decided to impose an administrative fine of 90 thousand lira on the relevant party.
In KVKK's decision, it was stated that the contract made for internet use was "directing to give explicit consent" and that this constituted a violation of the Personal Data Protection Law No. 6698. In the decision, which stated that other processing conditions other than explicit consent were also included in the law, it was noted that the internet service provider's practice violated the principle of "compliance with the law and the rules of honesty".
Open Questions
- What is the name of the penalized internet service provider?
- Will there be a mass audit of similar practices?






