Turkiye: Data protection regulation in Bill on Amendments to the Code of Criminal Procedure, Some Laws and the Decree Law No. 659

Implemented Law No. 7499 including cross-border data transfer regulation

Adopted Personal Data Protection Board's (KVKK) Guidelines on Conditions for Processing Data unter Turkish and EU law

Issued KVKK ruling against data controllers for non-compliance with registration requirements under Personal Data Protection Law

Adopted Personal Data Protection Board's Guide on Binding Corporate Rules (BCRs) for Data Processors

Adopted Personal Data Protection Board's Binding Corporate Rules Application Form for Data Processors

Adopted Personal Data Protection Board's Guide on Binding Corporate Rules (BCRs) for Data Controllers

Adopted Personal Data Protection Board's Binding Corporate Rules Application Form for Data Controllers

Adopted Personal Data Protection Board's Document on Standard Contract for the Transfer of Personal Data Abroad From Data Processor to Data Controller

Adopted Personal Data Protection Board's Document on Standard Contract for the Transfer of Personal Data Abroad From Data Processor to Data Processor

Adopted Personal Data Protection Board's Document on Standard Contract for the Transfer of Personal Data Abroad From Data Controller to Data Processor

Adopted Personal Data Protection Board's Document on Standard Contract for the Transfer of Personal Data Abroad From Data Controller to Data Controller

Implemented Personal Data Protection Board’s Regulation on Procedures and Principles Regarding the Transfer of Personal Data Abroad

Adopted Information Note on Legal Conditions for Personal Data Processing

Implemented Decision 2023/1154 establishing exception criteria regarding the obligation to register in the Data Controllers Registry

KVKK issues notice on VERBIS registration

Implemented Personal Data Protection Act including data protection measures

Implemented Personal Data Protection Act including business registration requirement

Implemented Personal Data Protection Act including data protection authority governance

Implemented Personal Data Protection Act including cross-border data transfer

Implemented Personal Data Protection Act including cybersecurity regulation