Turkey: Privacy Protection

Turkish municipalities have been conducting live broadcasts from public spaces for tourism promotion, but these streams often capture identifiable personal data.

Turkey's Constitutional Court examines whether administrative fines imposed for processing publicly disclosed personal data violate the principle of legality in crimes and punishments. The case centers on whether regulatory interpretations can create obligations not explicitly defined in the Personal Data Protection Law, raising fundamental questions about legal predictability and constitutional safeguards in data protection enforcement.

The Turkish Personal Data Protection Board has issued a landmark principle decision addressing the processing of biometric data for employee attendance tracking purposes. This decision establishes critical guidelines for employers regarding the lawful collection and use of sensitive biometric information in workplace settings. Understanding these new regulatory requirements is essential for organizations operating in Turkey to ensure compliance with data protection obligations.

The Turkish Data Protection Authority (“DPA”) has issued a principle decision requiring that explicit consent and privacy notices be presented separately to data subjects.

In medical treatment processes, patients may often feel vulnerable, uninformed, or unable to prove what was promised to them. This is especially common in aesthetic surgery, dental treatments, implant procedures...

The information document titled “QR Kodlarla Gelen Risk: Quishing” published by the Personal Data Protection Authority (“Authority”) examines the concept of quishing, defined as a type of phishing...

February 2026 was a particularly active month for technology law developments in Türkiye, with the Turkish Personal Data Protection Authority (the “DPA”) issuing a principle decision affecting retail practices, publishing new cybersecurity warnings...

Kurul başta gıda, kozmetik, teknoloji, yapı market ve giyim gibi sektörlerde yaygın kullanılan sadakat kart programlarında ve mağaza sadakat...

Kişisel Verileri Koruma Kurulunun İş Ortaklığı / Konsorsiyum / Adi Ortaklık Gibi Yapılar Nezdinde Gerçekleştirilen Faaliyetlerde İşlenen Kişisel Verilerin VERBİS’e Bildirimi Hakkındaki Kamuoyu Duyurusu...