Turkiye: Adopted Personal Data Protection Act including cybersecurity regulation

On 24 March 2016, the Personal Data Protection Act, including cybersecurity regulation, was adopted by the Grand National Assembly of Turkiye. In particular, the Act would require entities to implement preventive and detective security measures to ensure the protection of the personal data stored against unlawful access. Furthermore, under the Act, the entities would be required to notify the data subject and authorities in case of data breaches. The Act comes into force 6 months after its publication in the official Gazette.