On 13 July 2020, the President signed Law No. 151 of 2020, Promulgating the Personal Data Protection Law. The law will come into force on 17 October 2020. The law specifies that personal data processing requires explicit consent from the data subject or must be legally justified. It mandates that controllers and processors implement measures to ensure data security and confidentiality. The law also requires clear documentation of data processing activities and adherence to data minimisation principles.
Original source