Turkey: Data Protection

5 Mayıs 2026 tarihinde gerçekleştirilen Siber Güvenlik Kurulu toplantısında, Türkiye’nin siber güvenlik politikaları; mevcut riskler, küresel gelişmeler ve geleceğe yönelik eğilimler çerçevesinde ele alınmıştır.

Turkey's Cybersecurity Council convened to address evolving cyber threats within a framework of national security, emphasizing the protection of critical infrastructure across multiple sectors including energy, finance, healthcare, and defense.

Turkey introduces sweeping changes to its Internet Law, establishing age restrictions for social media platforms and creating a comprehensive regulatory framework for gaming platforms.

In medical treatment processes, patients may often feel vulnerable, uninformed, or unable to prove what was promised to them. This is especially common in aesthetic surgery, dental treatments, implant procedures...

A proposed amendment to Turkish Law No. 5651 introduces comprehensive compliance obligations for digital gaming platforms, social media providers, and game distributors. The new regulatory framework mandates age verification systems, parental control tools, content classification by age ratings, and risk assessment reporting to the Information Technologies and Communication Authority (BTK), with significant administrative penalties for non-compliance.

The information document titled “QR Kodlarla Gelen Risk: Quishing” published by the Personal Data Protection Authority (“Authority”) examines the concept of quishing, defined as a type of phishing...

In the objection application numbered 2025/120 filed before the Constitutional Court ("CC"), it was alleged that Article 27(2) of the Turkish Civil Code No. 4721 (the "Law"), which provides for the publication of court decisions regarding name changes on the announcement portal of the Press Advertisement Agency, is unconstitutional, within the scope of a lawsuit filed for the correction of the civil registry.

Kişisel Verileri Koruma Kurulu (“Kurul”), 18 Şubat 2026 tarihli ve 2026/347 sayılı İlke Kararı ile veri koruma uygulamalarında önemli bir noktaya açıklık getirmiştir.

The Turkish Personal Data Protection Board (“Board”) has clarified a key issue in data protection practices through its Principle Decision dated 18 February 2026 and numbered 2026/347.