The Turkish Personal Data Authority (KVKK) has fined social media platform X for misuse of user data. X collected personal data for security purposes, but then used it for targeted advertising.

The authority imposed an administrative fine of ₺1.47 million ($42,774) on X, citing violations of data security rules.

KVKK launched an investigation following reports, including a statement on X’s website, showing that email addresses and telephone numbers collected for “security and safety purposes” were unintentionally used for advertising.

The authority concluded that

Data authority warns of possible third-party access

The KVKK expressed concern that personal data collected for security purposes would be accessible to third parties.

Given the large number of