Turkiye: Adopted KVKK standard contract notification module for cross-border data transfer

On 17 October 2024, the Personal Data Protection Authority of Turkey (KVKK) adopted the standard contract notification module for cross-border data transfer. The module applies to data controllers and processors involved in the transfer of personal data abroad. It was highlighted that Article 9 of the Law on the Protection of Personal Data has been amended to allow standard contracts for the secure transfer of personal data abroad. The module mandates that standard contracts for such transfers be notified to the Personal Data Protection Board within five working days of signing the contract.