On 26 December 2014, the Personal Data Protection Act, including data protection measures, was introduced in the Grand National Assembly of Turkiye. In particular, the Act would require entities to collect and process data based on legitimate purpos…