In accordance with the Law on the Protection of Personal Data, the sanctions imposed by the Board due to the data controllers who establish and manage the personal data recording system and who are obliged to process these data do not comply with their obligations and act against the law are published on the board’s website in the form of board decisions. In this article, we will examine some of the decisions made by the Board.