Google Workspace ve Espoo \u015eehri Karar\u0131 \u2013 GDPR Madde 6(1)(c) Nerede Ba\u015flar, Nerede Biter?<\/p>\n
Bir kamu kurumu, e\u011fitim altyap\u0131s\u0131n\u0131 dijitalle\u015ftirirken hangi yasal zemine dayanmal\u0131? Espoo \u015eehri’nin ilkokullarda Google Workspace for Education kullan\u0131m\u0131na ili\u015fkin tart\u0131\u015fmal\u0131 karar\u0131, kamu yarar\u0131, yasal y\u00fck\u00fcml\u00fcl\u00fck ve veri minimizasyonu ilkelerinin kesi\u015fim noktas\u0131nda \u00f6nemli dersler sunuyor.<\/p>\n
Olay\u0131n Arka Plan\u0131<\/p>\n
Espoo \u015eehri, temel e\u011fitimi organize etme y\u00fck\u00fcml\u00fcl\u00fc\u011f\u00fc kapsam\u0131nda Google Workspace for Education platformunu ilkokullarda uygulamaya koydu. Denetleyici olarak Espoo, bu i\u015flemenin GDPR Madde 6(1)(c) \u2013 yasal y\u00fck\u00fcml\u00fcl\u00fck dayana\u011f\u0131na oturdu\u011funu savundu. Ancak Finlandiya Veri Koruma Ajans\u0131 (DPA), bu savunmay\u0131 yeterli g\u00f6rmeyerek i\u015flemenin yasal temele dayanmad\u0131\u011f\u0131na karar verdi.<\/p>\n
Veri Koruma Ajans\u0131\u2019na g\u00f6re, Temel E\u011fitim Yasas\u0131 bir e-\u00f6\u011frenme platformu kullan\u0131m\u0131n\u0131 a\u00e7\u0131k\u00e7a zorunlu k\u0131lm\u0131yor ve bu nedenle Madde 6(1)(c)\u2019ye dayanak olu\u015fturamazd\u0131. \u0130\u015flemeye konu verilerin kapsam\u0131 geni\u015fti, \u00e7ocuklar\u0131n verileri i\u015fleniyor ve platform \u00fczerinde denetleyicinin kontrol\u00fc s\u0131n\u0131rl\u0131yd\u0131.<\/p>\n
Temel Bulgular<\/p>\n
– Yetersiz Yasal Dayanak: Temel E\u011fitim Yasas\u0131, e-\u00f6\u011frenme platformlar\u0131n\u0131n kullan\u0131m\u0131na a\u00e7\u0131k\u00e7a at\u0131f yapmad\u0131\u011f\u0131 i\u00e7in GDPR 6(1)(c) kapsam\u0131nda ge\u00e7erli bir yasal y\u00fck\u00fcml\u00fcl\u00fck olu\u015fturmaz.<\/p>\n
– Orant\u0131l\u0131l\u0131k Sorunu: \u0130\u015flenen veri miktar\u0131, geleneksel e\u011fitim senaryosuna k\u0131yasla \u00e7ok daha fazlayd\u0131 ve bu durum, i\u015fleme faaliyetinin \u201cgereklilik\u201d ve \u201corant\u0131l\u0131l\u0131k\u201d ilkeleriyle uyu\u015fmad\u0131\u011f\u0131n\u0131 g\u00f6sterdi.<\/p>\n
– Kontrol Eksikli\u011fi: Denetleyici, Google’\u0131n standart kullan\u0131m \u015fartlar\u0131n\u0131 kabul etmi\u015fti ve bu nedenle veri i\u015fleme faaliyetleri \u00fczerinde yeterli kontrole sahip de\u011fildi.<\/p>\n
Karar S\u00fcreci ve Mahkeme Yorumlar\u0131<\/p>\n
– \u0130lk A\u015fama (DPA ve \u0130dari Mahkeme): Her iki kurum da i\u015fleme faaliyetinin yasal bir y\u00fck\u00fcml\u00fcl\u00fck kapsam\u0131nda de\u011ferlendirilemeyece\u011fini belirtti.<\/p>\n
– Son A\u015fama (Y\u00fcksek \u0130dare Mahkemesi): Mahkeme bu g\u00f6r\u00fc\u015fe kat\u0131lmad\u0131. Temel E\u011fitim Yasas\u0131’n\u0131n, \u00f6\u011frencilere dijital okuryazarl\u0131k kazand\u0131rma hedefine i\u015faret etti\u011fini ve bu nedenle BT tabanl\u0131 \u00f6\u011frenme ara\u00e7lar\u0131n\u0131n kullan\u0131lmas\u0131n\u0131n e\u011fitim y\u00fck\u00fcml\u00fcl\u00fc\u011f\u00fc kapsam\u0131nda de\u011ferlendirilmesi gerekti\u011fini belirtti.<\/p>\n
– Platform \u0130smi Tart\u0131\u015fmas\u0131: Mahkeme, GDPR\u2019nin spesifik bir yaz\u0131l\u0131m veya hizmet ismi belirtmedi\u011fini; bu nedenle \u201cGoogle Workspace\u201din \u00f6zel olarak yasal y\u00fck\u00fcml\u00fcl\u00fc\u011fe i\u015faret etmesinin gerekmedi\u011fini vurgulad\u0131.<\/p>\n
Sonu\u00e7<\/p>\n
Y\u00fcksek \u0130dare Mahkemesi, i\u015flemenin GDPR 6(1)(c) kapsam\u0131nda de\u011ferlendirilebilece\u011fini ve DPA\u2019n\u0131n bu konuda hatal\u0131 bir yorum yapt\u0131\u011f\u0131n\u0131 belirterek dosyay\u0131 yeniden inceleme amac\u0131yla DPA\u2019ya geri g\u00f6nderdi. Mahkeme ayr\u0131ca, denetleyicinin platform \u00fczerindeki s\u0131n\u0131rl\u0131 kontrol\u00fc, farkl\u0131 veri t\u00fcrlerinin farkl\u0131 ama\u00e7larla kullan\u0131lmas\u0131 gibi konular\u0131n da GDPR\u2019nin di\u011fer maddeleri uyar\u0131nca ayr\u0131ca de\u011ferlendirilmesi gerekti\u011fini kaydetti.<\/p>\n
\u041e\u0446\u0435\u043d\u043a\u0430<\/p>\n
Bu karar, kamu kurumlar\u0131n\u0131n \u201cyasal y\u00fck\u00fcml\u00fcl\u00fck\u201d dayana\u011f\u0131n\u0131 kullanarak dijital platformlar\u0131 uygulamaya ge\u00e7irmeleri durumunda ne kadar dikkatli ve kapsaml\u0131 bir de\u011ferlendirme yapmalar\u0131 gerekti\u011fini g\u00f6steriyor. Ayn\u0131 zamanda GDPR 6(1)(c)’nin ne kadar s\u0131k\u0131 yorumlanmas\u0131 gerekti\u011fi, fakat ayn\u0131 zamanda hizmetlerin ad\u0131n\u0131n birebir mevzuatta ge\u00e7mesinin \u015fart olmad\u0131\u011f\u0131 gibi \u00f6nemli prensipleri de yeniden ortaya koyuyor.<\/p>\n
kaynak:<\/p>\n
1. https:\/\/gdprhub.eu?title=KHO_-_KHO:2025:29&mtc=today<\/p>\n
2. https:\/\/www.linkedin.com\/pulse\/google-workspace-decision-how-digital-tools-education-beg%C3%BCm-beyza-afqlf\/?trackingId=kmB%2B1DOARZ6GV0p%2BK%2FhZYg%3D%3D<\/p>\n
\u200bGoogle Workspace ve Espoo \u015eehri Karar\u0131 \u2013 GDPR Madde 6(1)(c) Nerede Ba\u015flar, Nerede Biter?<\/p>\n
Bir kamu kurumu, e\u011fitim altyap\u0131s\u0131n\u0131 dijitalle\u015ftirirken hangi yasal zemine dayanmal\u0131? Espoo \u015eehri’nin ilkokullarda Google Workspace for Education kullan\u0131m\u0131na ili\u015fkin tart\u0131\u015fmal\u0131 karar\u0131, kamu yarar\u0131, yasal y\u00fck\u00fcml\u00fcl\u00fck ve veri minimizasyonu ilkelerinin kesi\u015fim noktas\u0131nda \u00f6nemli dersler sunuyor.<\/p>\n
Olay\u0131n Arka Plan\u0131<\/p>\n
Espoo \u015eehri, temel e\u011fitimi organize etme y\u00fck\u00fcml\u00fcl\u00fc\u011f\u00fc kapsam\u0131nda Google Workspace for Education platformunu ilkokullarda uygulamaya koydu. Denetleyici olarak Espoo, bu i\u015flemenin GDPR Madde 6(1)(c) \u2013 yasal y\u00fck\u00fcml\u00fcl\u00fck dayana\u011f\u0131na oturdu\u011funu savundu. Ancak Finlandiya Veri Koruma Ajans\u0131 (DPA), bu savunmay\u0131 yeterli g\u00f6rmeyerek i\u015flemenin yasal temele dayanmad\u0131\u011f\u0131na karar verdi.<\/p>\n
Veri Koruma Ajans\u0131\u2019na g\u00f6re, Temel E\u011fitim Yasas\u0131 bir e-\u00f6\u011frenme platformu kullan\u0131m\u0131n\u0131 a\u00e7\u0131k\u00e7a zorunlu k\u0131lm\u0131yor ve bu nedenle Madde 6(1)(c)\u2019ye dayanak olu\u015fturamazd\u0131. \u0130\u015flemeye konu verilerin kapsam\u0131 geni\u015fti, \u00e7ocuklar\u0131n verileri i\u015fleniyor ve platform \u00fczerinde denetleyicinin kontrol\u00fc s\u0131n\u0131rl\u0131yd\u0131.<\/p>\n
Temel Bulgular<\/p>\n
– Yetersiz Yasal Dayanak: Temel E\u011fitim Yasas\u0131, e-\u00f6\u011frenme platformlar\u0131n\u0131n kullan\u0131m\u0131na a\u00e7\u0131k\u00e7a at\u0131f yapmad\u0131\u011f\u0131 i\u00e7in GDPR 6(1)(c) kapsam\u0131nda ge\u00e7erli bir yasal y\u00fck\u00fcml\u00fcl\u00fck olu\u015fturmaz.<\/p>\n
– Orant\u0131l\u0131l\u0131k Sorunu: \u0130\u015flenen veri miktar\u0131, geleneksel e\u011fitim senaryosuna k\u0131yasla \u00e7ok daha fazlayd\u0131 ve bu durum, i\u015fleme faaliyetinin \u201cgereklilik\u201d ve \u201corant\u0131l\u0131l\u0131k\u201d ilkeleriyle uyu\u015fmad\u0131\u011f\u0131n\u0131 g\u00f6sterdi.<\/p>\n
– Kontrol Eksikli\u011fi: Denetleyici, Google’\u0131n standart kullan\u0131m \u015fartlar\u0131n\u0131 kabul etmi\u015fti ve bu nedenle veri i\u015fleme faaliyetleri \u00fczerinde yeterli kontrole sahip de\u011fildi.<\/p>\n
Karar S\u00fcreci ve Mahkeme Yorumlar\u0131<\/p>\n
– \u0130lk A\u015fama (DPA ve \u0130dari Mahkeme): Her iki kurum da i\u015fleme faaliyetinin yasal bir y\u00fck\u00fcml\u00fcl\u00fck kapsam\u0131nda de\u011ferlendirilemeyece\u011fini belirtti.<\/p>\n
– Son A\u015fama (Y\u00fcksek \u0130dare Mahkemesi): Mahkeme bu g\u00f6r\u00fc\u015fe kat\u0131lmad\u0131. Temel E\u011fitim Yasas\u0131’n\u0131n, \u00f6\u011frencilere dijital okuryazarl\u0131k kazand\u0131rma hedefine i\u015faret etti\u011fini ve bu nedenle BT tabanl\u0131 \u00f6\u011frenme ara\u00e7lar\u0131n\u0131n kullan\u0131lmas\u0131n\u0131n e\u011fitim y\u00fck\u00fcml\u00fcl\u00fc\u011f\u00fc kapsam\u0131nda de\u011ferlendirilmesi gerekti\u011fini belirtti.<\/p>\n
– Platform \u0130smi Tart\u0131\u015fmas\u0131: Mahkeme, GDPR\u2019nin spesifik bir yaz\u0131l\u0131m veya hizmet ismi belirtmedi\u011fini; bu nedenle \u201cGoogle Workspace\u201din \u00f6zel olarak yasal y\u00fck\u00fcml\u00fcl\u00fc\u011fe i\u015faret etmesinin gerekmedi\u011fini vurgulad\u0131.<\/p>\n
Sonu\u00e7<\/p>\n
Y\u00fcksek \u0130dare Mahkemesi, i\u015flemenin GDPR 6(1)(c) kapsam\u0131nda de\u011ferlendirilebilece\u011fini ve DPA\u2019n\u0131n bu konuda hatal\u0131 bir yorum yapt\u0131\u011f\u0131n\u0131 belirterek dosyay\u0131 yeniden inceleme amac\u0131yla DPA\u2019ya geri g\u00f6nderdi. Mahkeme ayr\u0131ca, denetleyicinin platform \u00fczerindeki s\u0131n\u0131rl\u0131 kontrol\u00fc, farkl\u0131 veri t\u00fcrlerinin farkl\u0131 ama\u00e7larla kullan\u0131lmas\u0131 gibi konular\u0131n da GDPR\u2019nin di\u011fer maddeleri uyar\u0131nca ayr\u0131ca de\u011ferlendirilmesi gerekti\u011fini kaydetti.<\/p>\n
\u041e\u0446\u0435\u043d\u043a\u0430<\/p>\n
Bu karar, kamu kurumlar\u0131n\u0131n \u201cyasal y\u00fck\u00fcml\u00fcl\u00fck\u201d dayana\u011f\u0131n\u0131 kullanarak dijital platformlar\u0131 uygulamaya ge\u00e7irmeleri durumunda ne kadar dikkatli ve kapsaml\u0131 bir de\u011ferlendirme yapmalar\u0131 gerekti\u011fini g\u00f6steriyor. Ayn\u0131 zamanda GDPR 6(1)(c)’nin ne kadar s\u0131k\u0131 yorumlanmas\u0131 gerekti\u011fi, fakat ayn\u0131 zamanda hizmetlerin ad\u0131n\u0131n birebir mevzuatta ge\u00e7mesinin \u015fart olmad\u0131\u011f\u0131 gibi \u00f6nemli prensipleri de yeniden ortaya koyuyor.<\/p>\n
kaynak:<\/p>\n
1. https:\/\/gdprhub.eu?title=KHO_-_KHO:2025:29&mtc=today<\/p>\n
2. https:\/\/www.linkedin.com\/pulse\/google-workspace-decision-how-digital-tools-education-beg%C3%BCm-beyza-afqlf\/?trackingId=kmB%2B1DOARZ6GV0p%2BK%2FhZYg%3D%3D\u00a0Hukuki Haber<\/p>\n
Haberin Al\u0131nt\u0131land\u0131\u011f\u0131 Kaynak: www.hukukihaber.net<\/p>","protected":false},"excerpt":{"rendered":"
Google Workspace ve Espoo \u015eehri Karar\u0131 \u2013 GDPR Madde 6(1)(c) Nerede Ba\u015flar, Nerede Biter? Bir kamu kurumu, e\u011fitim altyap\u0131s\u0131n\u0131 dijitalle\u015ftirirken hangi yasal zemine dayanmal\u0131? Espoo \u015eehri’nin ilkokullarda Google Workspace for Education kullan\u0131m\u0131na ili\u015fkin tart\u0131\u015fmal\u0131 karar\u0131, kamu yarar\u0131, yasal y\u00fck\u00fcml\u00fcl\u00fck ve veri minimizasyonu ilkelerinin kesi\u015fim noktas\u0131nda \u00f6nemli dersler sunuyor. Olay\u0131n Arka Plan\u0131 Espoo \u015eehri, temel e\u011fitimi organize etme y\u00fck\u00fcml\u00fcl\u00fc\u011f\u00fc kapsam\u0131nda Google Workspace for Education platformunu ilkokullarda uygulamaya koydu. Denetleyici olarak Espoo, bu i\u015flemenin GDPR Madde 6(1)(c) \u2013 yasal y\u00fck\u00fcml\u00fcl\u00fck dayana\u011f\u0131na oturdu\u011funu savundu. Ancak Finlandiya Veri Koruma Ajans\u0131 (DPA), bu savunmay\u0131 yeterli g\u00f6rmeyerek i\u015flemenin yasal temele dayanmad\u0131\u011f\u0131na karar verdi. Veri Koruma Ajans\u0131\u2019na g\u00f6re, Temel E\u011fitim Yasas\u0131 bir e-\u00f6\u011frenme platformu kullan\u0131m\u0131n\u0131 a\u00e7\u0131k\u00e7a zorunlu k\u0131lm\u0131yor ve bu nedenle Madde 6(1)(c)\u2019ye dayanak olu\u015fturamazd\u0131. \u0130\u015flemeye konu verilerin kapsam\u0131 geni\u015fti, \u00e7ocuklar\u0131n verileri i\u015fleniyor ve platform \u00fczerinde denetleyicinin kontrol\u00fc s\u0131n\u0131rl\u0131yd\u0131. Temel Bulgular – Yetersiz Yasal Dayanak: Temel E\u011fitim Yasas\u0131, e-\u00f6\u011frenme platformlar\u0131n\u0131n kullan\u0131m\u0131na a\u00e7\u0131k\u00e7a at\u0131f yapmad\u0131\u011f\u0131 i\u00e7in GDPR 6(1)(c) kapsam\u0131nda ge\u00e7erli bir yasal y\u00fck\u00fcml\u00fcl\u00fck olu\u015fturmaz. – Orant\u0131l\u0131l\u0131k Sorunu: \u0130\u015flenen veri miktar\u0131, geleneksel e\u011fitim senaryosuna k\u0131yasla \u00e7ok daha fazlayd\u0131 ve bu durum, i\u015fleme faaliyetinin \u201cgereklilik\u201d ve \u201corant\u0131l\u0131l\u0131k\u201d ilkeleriyle uyu\u015fmad\u0131\u011f\u0131n\u0131 g\u00f6sterdi. – Kontrol Eksikli\u011fi: Denetleyici, Google’\u0131n standart kullan\u0131m \u015fartlar\u0131n\u0131 kabul etmi\u015fti ve bu nedenle veri i\u015fleme faaliyetleri \u00fczerinde yeterli kontrole sahip …<\/p>","protected":false},"author":3,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[27],"tags":[],"class_list":["post-113866","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hukukihaber"],"acf":[],"yoast_head":"\n