Unauthorized Publication of a Foreigner’s Personal Information in Turkey: Criminal Remedies (2026 Updated Guide)

A foreign national’s personal information is published without permission in Turkey. Learn about criminal complaints, evidence preservation, removal requests, personal data offenses, investigation procedures and compensation options.

The unauthorized publication of a foreign national’s personal information in Turkey can create serious privacy, security and reputational consequences. Passport information, residence details, telephone numbers, photographs, identity information, workplace details, bank information or other personal data may be distributed through social media, messaging applications, websites or other digital channels. Depending on the circumstances, unauthorized disclosure may trigger criminal-law consequences as well as separate personal-data, civil-law and content-removal remedies. A foreign victim should act quickly because online information can be copied, redistributed or deleted before usable evidence is preserved.

What Is Considered Personal Information?

Personal data broadly concerns information relating to an identified or identifiable individual. Depending on the circumstances, this can include a person’s name, passport information, foreign identity number, address, telephone number, photograph, employment information, financial information and other identifying data.

The legal assessment depends on exactly what was disclosed and how it was obtained and distributed.

Is Publishing a Foreigner’s Personal Data Without Permission a Crime?

Potentially. Turkish criminal law contains specific offenses concerning unlawfully obtaining, giving or disseminating personal data.

Whether a particular publication constitutes a criminal offense depends on the nature of the information, how the accused obtained it, whether there was lawful authority for disclosure and the circumstances in which it was published.

Foreign Nationals Are Protected in Turkey

A person does not lose privacy or criminal-law protections merely because they are not a Turkish citizen.

A foreign victim can therefore seek legal remedies in Turkey when conduct falling within Turkish jurisdiction unlawfully affects their personal information.

What Types of Information Can Create Criminal-Law Issues?

Cases may involve publication of passport photographs, identity documents, residence permits, addresses, telephone numbers, bank details, photographs, travel information, employment information or other identifying records.

More sensitive information can create even greater risks for the victim.

Passport Information Published Online

A photograph or copy of a passport can expose the foreign national to identity fraud and other misuse.

The victim should preserve evidence showing where the passport image appeared, who published it if known and when it was accessible.

Residence Permit Information

Publication of a residence permit may reveal identity numbers, dates and other personal information.

The foreign national should avoid circulating additional copies of the document unnecessarily while attempting to prove the original disclosure.

Home Address Published Without Permission

Publishing a person’s home address can create significant security concerns, particularly where it accompanies threats, harassment or stalking.

The address disclosure and any connected threatening communications should be documented together.

Telephone Number Shared Online

A telephone number may constitute personal information connected with an identifiable individual.

If publication leads to repeated calls, threats or harassment, additional criminal-law issues may arise depending on the conduct.

Bank Information and Financial Data

Unauthorized disclosure of account or financial information can create both privacy and fraud risks.

The victim should consider notifying the relevant financial institution promptly if there is a realistic risk of unauthorized transactions or account misuse.

Photographs Can Also Be Relevant

Whether publication of a photograph creates criminal liability depends on the circumstances.

The analysis may involve privacy, personal-data rules and potentially other offenses depending on how the photograph was obtained and used.

Social Media Publication

Personal information may be distributed rapidly through social-media accounts.

The victim should preserve the username, profile information, date, time, post content, comments and other identifying details before the material disappears.

Messaging Applications

Personal data may also be distributed through group chats or messaging applications.

Screenshots alone may not always provide the complete evidentiary picture, so preserve available information showing the sender, group, date, context and original message.

Evidence Preservation Should Come First

Before demanding immediate deletion, consider whether sufficient evidence has been preserved.

Once the content is removed, proving precisely what was published may become more difficult.

Take Screenshots Carefully

Screenshots should capture the publication itself together with information showing the relevant account, date and surrounding context where available.

Avoid excessive editing or cropping that removes important identifying information.

Preserve the Original URL or Digital Location

Where the content appears online, preserve information identifying where it was published. If the platform later removes the material, this can assist in reconstructing the publication.

Consider Formal Evidence Preservation

For commercially or personally serious cases, more formal methods of establishing online content may be preferable to relying only on an ordinary screenshot.

The appropriate method should be considered according to the urgency and nature of the case.

Can the Foreigner File a Criminal Complaint?

Potentially, yes. Where the circumstances indicate a criminal offense, the foreign victim may submit a complaint or report the matter to the competent Turkish authorities.

The submission should identify the conduct, disclosed information, available evidence and suspected person where known.

What If the Publisher Is Unknown?

The fact that the victim does not know the person’s legal identity does not necessarily prevent action.

Available account information, telephone numbers, electronic records and other evidence may potentially assist an investigation, subject to lawful investigative procedures.

Fake Accounts Can Still Be Investigated

A person may use an anonymous or false social-media profile.

The foreign victim should preserve every available identifier rather than attempting to identify the person through unlawful methods.

Do Not Hack the Suspect’s Account

Victims should not attempt to obtain evidence by unlawfully accessing another person’s account or device.

Evidence-gathering methods can themselves create legal problems if they violate criminal or privacy rules.

What If the Information Was Originally Given Voluntarily?

Providing personal information to someone for one purpose does not necessarily mean that person has unrestricted authority to publish it publicly.

The scope and purpose of the original disclosure should therefore be examined.

Former Business Partner Publishes Personal Information

Commercial disputes sometimes lead to disclosure of passports, addresses, private correspondence or financial information.

The existence of a business dispute does not automatically authorize public dissemination of personal data.

Former Employee or Employer Discloses Information

Employment relationships can provide access to extensive personal records.

Whether later disclosure creates criminal or other liability depends on the information, purpose, legal authority and manner of disclosure.

Landlord Publishes a Foreign Tenant’s Information

Landlords may possess passport, residence or contact information because of the tenancy relationship.

Possessing the information for legitimate rental purposes should be distinguished from publishing or distributing it for unrelated purposes.

Hotel or Accommodation Records

Hotels and accommodation providers may lawfully obtain information for regulatory and contractual purposes.

That does not automatically mean such information can be publicly disclosed.

What If the Information Is True?

Truth does not automatically eliminate every privacy or personal-data issue.

The legal question is not limited to whether the information is factually accurate; the authority to obtain, disclose or disseminate the information can also matter.

What If the Information Was Already Available Somewhere Else?

Previous availability may affect the factual analysis, but it should not automatically be assumed that any further collection, republication or dissemination is lawful.

The precise source, purpose and circumstances remain relevant.

Threats Combined With Personal Data Publication

If someone publishes a foreign national’s address or identity information together with threats, the conduct should be evaluated as a whole.

There may be multiple potential offenses rather than only a personal-data issue.

Blackmail and Personal Information

A person may threaten to publish private information unless money is paid or another demand is satisfied.

Such conduct can raise substantially different and more serious criminal issues. Preserve the demand and related communications without negotiating away important evidence.

Stalking and Doxxing-Type Conduct

Repeated publication of addresses, telephone numbers, workplace information or movements may be connected with persistent harassment or stalking.

The pattern of conduct should be documented chronologically.

Publication of Intimate or Highly Private Information

Cases involving intensely private material require urgent legal assessment because privacy violations, threats, blackmail and other offenses may overlap.

Evidence should be preserved while minimizing further circulation of the material.

Can the Content Be Removed?

Potentially. Content-removal, access-restriction or platform-based remedies may exist depending on where and how the information was published.

These remedies are distinct from the criminal investigation. Removing content does not necessarily eliminate potential criminal liability for the original publication.

Criminal Complaint and Removal Can Proceed Separately

A foreign victim does not necessarily have to choose between seeking criminal accountability and seeking rapid removal of the information.

Different procedures may address different objectives.

Personal Data Protection Remedies May Also Exist

Unauthorized disclosure can also raise issues under Turkey’s personal-data protection framework.

Criminal-law remedies and data-protection remedies should be distinguished and, where appropriate, coordinated.

Civil Compensation May Be Possible

Where unlawful disclosure causes legally compensable damage, civil remedies may also need to be considered.

Potential criminal liability does not automatically determine the outcome or amount of a civil compensation claim.

Proving Damage

Preserve evidence of concrete consequences such as fraudulent contacts, employment problems, security expenses or other losses.

For reputational or non-economic harm, the factual circumstances and seriousness of the disclosure can become important.

What If the Publisher Deletes the Post?

Deletion does not necessarily mean that the original conduct becomes legally irrelevant.

Previously preserved evidence can remain important to an investigation.

What If the Publisher Apologizes?

An apology may be relevant factually but does not automatically erase all legal consequences.

Its significance depends on the alleged offense and procedural circumstances.

Foreign Victim Living Outside Turkey

A foreign national who has left Turkey may still need to address an unlawful publication connected with Turkey.

Jurisdiction, representation and procedural arrangements should be examined according to the specific case.

Interpreter Rights During the Criminal Process

A foreign victim who cannot sufficiently understand Turkish should raise the need for interpretation during relevant criminal proceedings.

Statements should not be signed unless the person understands their content accurately.

Do Not Sign an Incorrectly Translated Statement

If an interpreter incorrectly translates the victim’s explanation, the problem should be raised before signing whenever possible.

Names, dates, account details and the exact information published should be checked carefully.

Preserve a Chronology

Prepare a timeline identifying when the information was first discovered, where it appeared, who distributed it, whether it was reposted, when removal was requested and what consequences followed.

This can significantly improve the clarity of a criminal complaint.

Preserve Witness Information

If other people saw the publication before it was deleted, record their identities and what they observed.

Witness evidence can become useful where digital content is no longer accessible.

Avoid Publicly Reposting the Information to Complain About It

A victim can unintentionally spread their own sensitive information further by reposting screenshots publicly.

Evidence should be preserved privately and disclosed only where necessary.

Secure Accounts After a Data Leak

If the disclosed information could enable account takeover or identity fraud, change compromised passwords and activate available security measures.

This practical response should occur alongside legal action.

Consider Replacing Compromised Documents Where Necessary

Where highly sensitive identity information has been exposed and misuse presents a realistic risk, the foreign national should evaluate appropriate protective measures concerning the relevant document or account.

What Should the Criminal Complaint Include?

A well-organized complaint should explain who the victim is, what information was disclosed, why the disclosure is alleged to be unlawful, where and when it occurred, who is suspected, what evidence exists and whether related threats, harassment or financial misuse occurred.

Attach evidence systematically.

Avoid Overstating Unknown Facts

If the identity of the publisher is uncertain, say so.

A criminal complaint should distinguish known facts from suspicions and requested investigative steps.

Immediate Action Plan

A foreign national whose personal information has been published without authorization in Turkey should immediately preserve the content and account information, document dates and distribution, protect compromised accounts, avoid unnecessary republication, identify witnesses, assess whether threats or blackmail are involved, evaluate criminal complaint procedures, consider urgent content-removal and personal-data remedies, and preserve evidence of resulting financial or reputational damage.

Frequently Asked Questions

Can a foreigner file a criminal complaint in Turkey for unauthorized publication of personal information?

Potentially, yes. Foreign nationality does not by itself prevent a person from seeking protection under Turkish criminal law.

Is publishing a passport photograph without permission potentially serious?

Yes. Passport information can contain substantial identifying data and can create additional identity-misuse risks.

What if the publisher uses a fake social-media account?

Preserve every available identifier. The absence of a known legal name does not necessarily prevent an investigation.

Should the victim ask for deletion immediately?

Removal may be urgent, but evidence should first be preserved where possible so that deletion does not make the original publication unnecessarily difficult to prove.

Can screenshots be used as evidence?

They can be relevant, but the evidentiary strength depends on authenticity, context and the circumstances. Preserve as much identifying and contextual information as possible.

Does deleting the post end the criminal case?

Not automatically. Deletion does not necessarily erase the legal significance of conduct that has already occurred.

What if the information published is true?

Truth alone does not automatically make every disclosure lawful. The manner, purpose and legal authority for obtaining and disseminating personal information can remain relevant.

Can compensation also be claimed?

Potentially. Civil compensation and criminal proceedings involve separate legal questions and should be evaluated according to the resulting harm.

What if publication is accompanied by threats?

Threats, blackmail, stalking or harassment may create additional criminal-law issues. The communications should be preserved together with the data disclosure.

What should the foreign victim do first?

Preserve reliable evidence before the content disappears, minimize further distribution of the personal information and obtain a legal assessment of criminal, content-removal, personal-data and compensation remedies without unnecessary delay.

Client-Focused Legal Support for Foreign Victims in Turkey

Unauthorized publication of personal information may involve criminal complaints, digital evidence, privacy violations, identity documents, social-media accounts, threats, blackmail, stalking, content removal and compensation claims. Fırat Fesih Kaya Law Office assists foreign nationals facing criminal-law and privacy disputes in Turkey. Lawyer Fırat Fesih Kaya provides legal assistance in preserving digital evidence, preparing criminal complaints, following investigation procedures, addressing unlawful disclosure of identity information and coordinating related legal remedies where necessary.

Phone: +90 312 434 22 22
Mobile: +90 532 769 22 22
Email: info@firatfesihkaya.av.tr
Address: Mevlana Boulevard No:221, Yıldırım Tower, Office No:148, 06520 Balgat, Çankaya, Ankara, Turkey