1-  Introduction On March 12, 2026, the Republic of Turkey Personal Data Protection Authority (the "Authority") published a document titled "Agentic AI" (the "Document") to address the qualitative transformatio…

1- Introduction On 5 March 2026, the Turkish Personal Data Protection Authority (“Authority”) shared with the public its recommendations regarding the use of generative artificial intelligence systems in busine…

The Personal Data Protection Board (“Board”) has introduced a significant change in the procedures for public disclosure of personal data breach notifications by imposing a time limit on announcements published…

What is this article about? i. Introduction ii. Cross-Border Data Transfer iii. Processing of Sensitive Data iv. Administrative Fines and Legal Remedies v. Coming Into Force vi. Consequences i. Introduction O…

In 2016, with the approval of Convention No. 108 for the first time in Turkey and the adoption of the Law on the Protection of Personal Data we started to celebrate Data Protection Day. Every year, we look forw…

The Turkish Data Protection legislation has been constantly updated in light of secondary legislation as well as decisions of the Turkish Data Protection Board. Thus controllers must follow up the changes and u…

Upon requests coming from various sector representatives including The Union of Chambers and Commodity Exchanges (TOBB), the Personal Data Protection Board in Turkey (“Board”) decided to postpo…

Finally, the time is up. GDPR becomes the applicable data protection law of the EU as of today. Legislators, regulators and companies had two years to get ready, but apparently it was not enough as not all of t…

A New Era for Turkish Data Privacy Practices Late in the night of 24 March 2016, Turkish National Parliament finally took the first step to have the long awaited Data Protection Law (“Law”) in place and sent th…