News and Publications

Turkey’s Data Protection Authority (“Authority”) has updated the Implementation Guideline for the Data Protection Law (“Guideline”). The Guideline now outlines the criteria for assessing “legitimate interest”, which is an exception enabling personal data to be processed without explicit consent. […]

Turkey’s Personal Data Protection Board has announced further details about the content and method of disclosures and declarations which data controllers must make while collecting personal data. Such declarations can be made in a range of methods, provided they […]

Turkey has announced rules and processes for data subjects to exercise their rights regarding personal data, as well as corresponding requirements for data controllers which process the information. Accordingly, data subjects can apply to data controllers via a range […]

Turkey’s Personal Data Protection Board (“Board”) has announced rules for processing special categories of personal data. Notably, data controllers must prepare a separate policy and procedure for protecting special categories of personal data. The Board also emphasized the importance […]

Turkey’s Personal Data Protection Board (“Board”), has adopted and published two important rulings. These address protection of personal data in websites/applications that provide phone-book services, as well as protection of personal data at service areas such as counters, box […]

Turkey’s Constitutional Court recently dismissed an application seeking to suspend and strike out certain clauses in the Data Protection Law number 6698 (“Law”). 124 deputies applied on the basis that the clauses are vague, broad, subjective, open to interpretation […]

The Turkish Constitutional Court recently considered an individual’s request for confidentiality within a malpractice case. It ruled that a fair balance must be struck between the public interest in conducting open proceedings and protecting an individual’s right to privacy. […]

Turkey has announced procedures and principles for registering with the Data Controllers Registry (“Registry”) by real persons and legal entities responsible for establishing and managing data recording systems (“Data Controller”). It has also outlined processing methods for personal data, […]

Turkey has amended the Regulation on Processing of Personal Health Data and Protection of Privacy (“Health Data Regulation”), concerning rules and regulatory framework for processing and transferring health-related personal data. Amendments were made by the Regulation Amending the Regulation […]

Operating rules have now been announced for Turkey’s Personal Data Protection Board (“Board”). The Regulation on Working Procedures and Principles of the Personal Data Protection Board (“Regulation”) outlines details of the Board’s operational procedures, duties, authorities and responsibilities. Notably, […]