15 Apr 2022
Following the data breach notification made by Yemek Sepeti that the web servers were accessed, the Personal Data Protection Authority ruled the second highest administrative fine it had ever imposed. The following statements are included in the data breach […]
15 Apr 2022
The Personal Data Protection Authority (“Authority”) published its principal decision on the blacklist applications of car rental companies, which conceptually includes joint data responsibility for the first time, in Official Gazette dated 20 January 2022 and numbered 31725. When […]
15 Apr 2022
After the publication of the guide on technical measures, the Personal Data Protection Board (“Board”) also published a public announcement on which technical measures should be taken by data controllers and their reasons. The most important provisions of the […]
15 Apr 2022
Data Sharing Services API Principles for Payment Services (“Guide”) was published on 16 February 2022 by the Central Bank of Turkey General Directorate of Payment Systems and Financial Technologies. The Guide aims to regulate the API principles and rules […]
11 Apr 2022
During the past decade, the regulation of cybersecurity has become a very hot topic in the world as a result of an increase in the level of importance attributed to data and privacy as well as the digitalisation of […]
16 Mar 2022
1. Cloud Computing 1.1 Laws and Regulations Although there are no specific laws for regulating cloud computing in Turkey, certain rules prescribed in several laws and secondary legislation concerning cloud computing apply in most cases. These rules are mainly […]
1 Feb 2022
The Personal Data Protection Board (“Board”) made a public announcement regarding the processing of personal data by sending a verification code to the data subjects via SMS during in-store shopping (“Announcement”) and published a summary of decision dated 3 […]
1 Feb 2022
The Communiqué on the Procedures and Principles Regarding the Personnel Certification Mechanism (“Communiqué”) prepared by the Personal Data Protection Board (“Board”) was published in Official Gazette numbered 31681 on dated 6 December 2021, as effective of even date. The procedures […]
24 Dec 2021
The Personal Data Protection Board issued its decision dated 20 January 2020 and numbered 2020/50 regarding the personal data breach notification of an apparel firm, on its official website. The Board found it acceptable that the data controller residing […]
9 Dec 2021
The following law(s) specifically govern personal data / information: Personal Data Protection Law No. 6698 (“ Law ”) is the main law governing personal data. Other than that, Electronic Communication Law No. 5809, The Law on Regulation of Electronic Commerce No. […]
