Turkey: Data Protection

Subscribe
Privacy law and privacy regulation thought leadership, articles, podcasts, videos and webinars from expert sources across the legal world. Explore insights covering topics including GDPR, data protection, data privacy, and privacy protection.
Article
Quick Read – Technology Law Updates In Türkiye
Türkiye's data protection and artificial intelligence landscape experienced significant developments in August 2026, including 47 new enforcement decisions from the Turkish Personal Data Protection Authority, extended compliance deadlines for loyalty programs, clarified restrictions on workplace biometric data use, and the publication of a comprehensive AI Action Plan for 2026-2030. These regulatory updates reflect evolving priorities in data security, breach prevention, and strategic AI development.
Turkey Privacy
KST LAW
Article
Türkiye’s Artificial Intelligence Action Plan For 2026 Published
Presidential Circular No. 2026/9, dated 17 August 2026, was published in the Official Gazette on 18 August 2026. The Circular requires public institutions and organisations to carry out the necessary work and provide the support needed to implement the Türkiye Artificial Intelligence Action Plan (the “Plan”), which sets out Türkiye’s artificial intelligence roadmap for the 2026–2030 period.
Turkey Technology
GT
Gen Temizer
Article
Constitutional Court Finds Data Protection Board’s Administrative Fine Contrary To The Principle Of Legality
The Constitutional Court, in its decision dated 27.01.2026 and numbered 2020/32193, published in the Official Gazette dated 16.06.2026, determined that the administrative fine imposed by the Personal Data Protection Board (the “Board”) on a data controller on grounds that the concept of the ‘purpose for which the data was made public’ is not regulated under the law and administrative fine imposed based on the relevant concept violates the principle of legality of offences and penalties (which also applies to misdemeanours).
Turkey Privacy
G+
Gun + Partners
Article
The Implications Of The EU AI Act For Turkish Companies
On 2 August 2026, Regulation (EU) 2024/1689 (the “EU AI Act” or “Act”) became generally applicable. Although Türkiye is not subject to the EU AI Act, the Act’s extraterritorial reach covers a broad spectrum of Turkish companies, ranging from software vendors and outsourcing providers to industrial manufacturers that integrate AI into products exported to the EU market.
Turkey Technology
KD
Kolcuoglu Demirkan Kocakli Attorneys at Law
Article
Reklamda Yeni Çač — Seri II: Karşilaştirmali Hukuk Dečerlendirmesi Ve Uyum Tavsiyeleri
31.07.2026 tarihli bilgi notumuzda, 1 Ağustos 2026 tarihinde yürürlüğe giren Ticari Reklam ve Haksız Ticari Uygulamalar Yönetmeliğinde Değişiklik Yapılmasına Dair Yönetmelik'in (“Değişiklik Yönetmeliği”) getirdiği değişiklikleri özetlemiştik. Şimdi, Değişiklik Yönetmeliği'nin getirdiği yeniliğe karşı uyum tavsiyemizi; ardından karşılaştırmalı hukuk değerlendirmesini ve Değişiklik Yönetmeliği'ne ilişkin eleştirilerimizi sunacağız.
Turkey Media & IT
MP
EKSP Law Firm
Article
A New Era In Advertising — Series II: Analysis In The Context Of Comparative Law And Recommendations For Compliance
In our information note dated July 31, 2026, we summarized the changes introduced by the Regulation Amending the Regulation on Commercial Advertising and Unfair Commercial Practices (“Amendment Regulation”), which entered into force on August 1, 2026. We will now present our compliance recommendations regarding the new provisions introduced by the Amendment Regulation, followed by a comparative legal analysis and our criticisms of the Amendment Regulation.
Turkey Media & IT
MP
EKSP Law Firm
Article
Sadakat Kart Uygulamalarına İlişkin KVKK Uyum Süresi 28 Şubat 2027’ye Uzatıldı
Kişisel Verileri Koruma Kurulu has extended the compliance deadline for loyalty card verification requirements to February 28, 2027. Data controllers must implement appropriate technical and administrative verification mechanisms, review their POS, CRM and loyalty systems, and update employee training, supplier contracts and KVKK documentation by this date to avoid potential sanctions under Turkey's data protection law.
Turkey Privacy
C
CBC Law Firm
See more