Newsletter-21

405 MISCELLANEOUS • To know the third parties to whom one’s data has been trans- mitted domestically or abroad • To request correction, erasure and destruction of one’s per- sonal data • To request notification to third parties of whether such data has been transmitted or not • To file complaints • To request compensation for the illegal processing of one’s data.” (Art. 11, Art. 4 et seq of the Convention No. 108) Criminal and Administrative Liability Criminal liability for the infringement of the Law shall be punish- able by Art. 135 et seq of the Turkish Criminal Code (Art. 17). The LPPD also imposes administrative fines on legal entities and natural persons who are data controllers, ranging from TRL 5.000 to TRL 1.000.000. Various Provisions Through LPPD, a Data Protection Authority, and a Data Protec- tion Board shall be established, as well (Art. 19 et seq). The Law establishes these while regulating the procedure for filing complaints, duties and working principles. Articles 8, 9, 11, 13, 14, 15, 16, 17 and 18 of the Law will enter into force six months following their publica- tion, while the remaining articles enter into force through publication. Conclusion The LPPD fills a great legal gap in the Turkish legislation by regulating the protection of personal data. Although the implementa- tion thereof is a matter to be seen, it can be said that its enactment is certainly a positive development towards greater protection of funda- mental rights and freedoms, and not just only personal data.