On 24 March 2016, the Personal Data Protection Act, including data protection measures, was adopted by the Grand National Assembly of Turkiye. In particular, the Act would require entities to collect and process data based on legitimate purposes and…