New 10-Article Term in Schools! List Sent to 81

A 10-article letter regarding the measures to be taken within the scope of personal data protection was sent to all provinces by the Ministry.

In the letter, it was stated that personal data of students, parents, teachers, staff, and other relevant individuals are processed during the procedures and operations conducted by the central and provincial organizations and educational institutions, and the importance of protecting the data in accordance with the Personal Data Protection Law (KVKK) and relevant legislation was emphasized.

The letter notified that personal data should only be processed within the scope of duties and service requirements, with specific and legitimate purposes, limited to the operation performed, that no excessive data should be collected, that data accuracy should be maintained, and that necessary measures should be applied against unauthorized access.

In line with the measures to be taken within this scope, content containing personal data on the websites, social media accounts, and online platforms of schools, institutions, and units will not be shared publicly.

METHODS THAT DO NOT CONTAIN PERSONAL DATA WILL BE USED IN ANNOUNCEMENTS AND SHARING

Student class lists, student numbers, Turkish ID numbers, exam lists, absenteeism and success information, health information, disciplinary records, parent information, personnel contact details as well as photos, videos, and similar content related to students and personnel cannot be published on school and institution websites, social media accounts, or online platforms.

Previously published lists, documents, photos, videos, announcements, and files containing personal data on the aforementioned platforms will be reviewed by school or institution management and content containing personal data will be removed from public access.

In cases where photo and video shooting or sharing is necessary within educational activities, the purpose of shooting and sharing, the sharing environment, storage period, and who will have access will be determined in advance.

Sensitivity will be shown in sharing images related to students, methods that do not include personal data will be used in announcements and shares, and situations requiring the processing of personal data will be evaluated within the framework of KVKK and relevant legislation.

ADMINISTRATIVE AND LEGAL PROCESSES WILL BE CARRIED OUT FOR UNAUTHORIZED ACTIONS


School administrators, teachers, and relevant staff will be encouraged to participate in the "Personal Data Protection Training Course in Educational Institutions" and "Information Security Awareness Training Course" on the Teacher Informatics Network (ÖBA) platform to raise awareness about personal data protection and information security.

Moreover, it is required not to share usernames, passwords, verification codes and similar access information provided for accessing Ministry systems with third parties, and not to use unauthorized third-party software, bots, macros, automation tools, browser extensions, unauthorized integrations, data extraction or transfer tools, and similar applications.

It is important not to enter usernames, passwords, and verification information into such software and not to attempt unauthorized bulk data retrieval, data transfer, or transaction on Ministry systems.

In the case of detection of unauthorized access to Ministry information systems, unauthorized data processing, data transfer, password sharing, or use of unauthorized third-party software, administrative and legal procedures will be carried out.

Cases of personal data breach, unauthorized access, sending data to the wrong person, suspicious software use, password sharing, and publication of personal data on websites will need to be reported to the school or institution manager and the affiliated unit.