Data Privacy Blog - Ozbek Attorney Partnership

Use of Generative Artificial Intelligence Tools in the Workplace: Recommendations from Data Protection Perspective

1- Introduction On 5 March 2026, the Turkish Personal Data Protection Authority (“Authority”) shared with the public its recommendations regarding the use of generative artificial intelligence systems in busine…

January 28th 2023 Data Protection Day

In 2016, with the approval of Convention No. 108 for the first time in Turkey and the adoption of the Law on the Protection of Personal Data we started to celebrate Data Protection Day. Every year, we look forw…

Administrative Fine Amounts Under the Law on Protection of Personal Data No. 6698

Every year, the Personal Data Protection Authority publishes updated administrative fines on its page.For more details please click the link below.Link to Fines Table

Turkish Data Protection Law – key considerations for global companies

This month Selin Ozbek Cittone and Julian Flamant (Hogan Lovells) discussed Turkish data protection law. “The discussion outlines key considerations for global companies, including obligations for controllers t…

How to increase awareness about Personal Data Protection with employees and data processors?

We all know that employers should provide awareness training to their employees on the protection of personal data. So, is the training given to the employees once enough? What is phishing? Why should you provi…

January 28th Data Protection Day

THE TURKISH DATA PROTECTION AUTHORITY PUBLISHED COMMON MISCONCEPTIONS-2 BOOKLET

The Turkish Data Protection Authority prepared and published the ‘Common Misconceptions-2’ booklet on 3 January 2022. This booklet was prepared in Q&A format and it includes answers to a total of 64 questio…

The Turkish Data Protection Board’s Whatsapp LLC Decision

The Turkish Data Protection Board (“Board”) announced on 3 September 2021 that it had imposed an administrative fine on Whatsapp LLC after concluding an ex-officio investigation concerning the controller's data…

HIGHLIGHTS OF THE AMAZON TURKEY DECISION

The Privacy community in Turkey is currently focusing on the fine imposed by the Turkish Data Protection Board (“TDPB”), against Amazon Turkey amounting to EUR 160,000. Although it is the 4th highest fine issue…

TURKISH DATA PROTECTION AUTHORITY PUBLISHED BINDING CORPORATE RULES

On 10 April 2020, the Turkish Data Protection Authority introduced binding corporate rules (‘BCR’) for cross-border transfers of personal data for multinational group companies. You may find the English version…

DATA PROTECTION APPROACHES ON THE PROCESSING OF PERSONAL DATA DURING THE COVID-19 PANDEMIC

The Turkish Data Protection Authority published an announcement on 27 March 2020 on its website in order to remind that fighting against COVID-19 in these unprecedented days is not an excuse for not complying w…

An Overview of the Decisions and Orders of the Turkish Data Protection Authority

This document sets out an overview on the implementation of the Turkish Data Protection Law no. 6698 (‘TDPL’) in light of the decisions and orders of the Data Protection Authority (“DPA”) in Turkey. We aimed to…

Turkish Data Protection Authority extended the deadlines for registry with Data Controllers Registry

The deadlines for registration with the Data Controllers Registry (“Registry”) has been extended by the Data Protection Board (“Board”) with its decision dated 27th December 2019 and numbered 2019/387. The Boar…

BOARD’S WARNING SHOT TO CONTROLLERS TO STAY UPDATED WHEN DEALING WITH DATA SUBJECT RIGHTS

The Turkish Data Protection legislation has been constantly updated in light of secondary legislation as well as decisions of the Turkish Data Protection Board. Thus controllers must follow up the changes and u…

The Data Protection Authority Reminded Data Controllers of their Duty to Notify Data Subjects for Data Breaches and Clarified the Requirements for Due Notification

On 15 October 2019, the Turkish Data Protection Authority (“TDPA”) published its decision on "Minimum Requirements for Data Breach Notifications to be made to Data Subjects" (dated 18 September 2019 and numbere…