Turkey: Privacy

The prevailing legal doctrine holds that all digital products containing data—particularly software—acquire the nature of goods when they are recorded on physical carriers such as CDs, portable storage devices, or computer memory

26 Haziran 2025 tarihli Resmi Gazete'de yayımlanan Kişisel Verileri Koruma Kurulu İlke Kararı ("Karar") ile Ürün ve Hizmet sunumu sırasında ilgili kişilere SMS ile doğrulama kodu gönderilmesi...

The Turkish Data Protection Authority ("Authority") has issued a public notice following complaints that creditor representatives were contacting...

Data privacy compliance is business-critical for mergers and acquisitions (M&A), as the significant disclosure and transfer of personal data between the buyer and target company require...

In July 2025, the Turkish Personal Data Protection Authority (the ‘DPA') published several bulletins, organised two seminars, and announced three data breach notifications.

The Turkish Ministry of Trade's Advertising Board ("the Board") sanctioned Getir Perakende Lojistik Anonim Şirketi ("Getir")—a company offering online grocery and food delivery services—for not allowing users to complete purchases without saving their credit card information.