Turkey: Technology

Turkey's data protection landscape in 2025 saw significant regulatory developments through the Personal Data Protection Authority's guidance documents, principle decisions, and enforcement actions. How did artificial intelligence regulation, cross-border data transfers, and cybersecurity legislation reshape compliance obligations for data controllers operating in Turkey?

Singapore’s Personal Data Protection Commission proposed non-binding guidelines applying the Data Protection Act across the entire generative AI supply chain. The proposed framework addresses web scraping, consent, transparency, data minimisation, and accountability, while clarifying that organisations relying on personal data for AI development must adopt appropriate safeguards and provide AI-specific privacy notices where required.

Turkey's advertising regulations undergo their most comprehensive revision in years, introducing strict new rules for discount pricing, AI-generated content, influencer marketing, and environmental claims. With only a one-month compliance period before August 1, 2026 enforcement, businesses must rapidly adapt their pricing systems, advertising practices, and consumer review mechanisms to meet the new transparency and verification requirements.

The Italian Data Protection Authority (“Garante”) imposed a €180,000 fine on Emirates following its investigation into the airline’s processing of passengers’ health data through its Medical Information for Fitness to Travel (“MEDIF”) process. While the authority confirmed that processing health data for the purpose of providing safe travel and special assistance was lawful and did not require consent, it found that Emirates failed to provide passengers with clear and comprehensive privacy information regarding the processing activities.

Turkey's data protection landscape in 2025 saw significant regulatory developments through the Personal Data Protection Authority's guidance documents, principle decisions, and enforcement actions. How did artificial intelligence regulation, cross-border data transfers, and cybersecurity legislation reshape compliance obligations for data controllers operating in Turkey?

Singapore’s Personal Data Protection Commission proposed non-binding guidelines applying the Data Protection Act across the entire generative AI supply chain. The proposed framework addresses web scraping, consent, transparency, data minimisation, and accountability, while clarifying that organisations relying on personal data for AI development must adopt appropriate safeguards and provide AI-specific privacy notices where required.

Stablecoinler, dijital finansal dönüşümün merkezinde yer alırken, ulusal finansal egemenlik açısından kritik sorular ortaya çıkarmaktadır. Parasal egemenlik, ödeme altyapısı bağımsızlığı ve düzenleyici kapasite üzerindeki etkileri, özellikle Avrupa için hem stratejik fırsat hem de risk yaratmaktadır. Bu yazı, stablecoinlerin finansal egemenlik boyutlarını ve A

Modern para sistemi, bankalar ve fintech şirketleri arasında artan bir gerilim yaşamaktadır. Geleneksel bankacılık güvenilir para üretirken, yeni nesil finansal teknoloji platformları daha hızlı ve kullanıcı dostu...

Hazine ve Maliye Bakanlığı tarafından hazırlanan "Mali Suçları Araştırma Kurulu Genel Tebliği (Sıra No: 19)'nde Değişiklik Yapılmasına Dair Tebliğ (Sıra No: 32)" ("Değişiklik Tebliği")...