On 14 August 2018, the President endorsed the text for Law No. 175 of 2018 on Anti-Cyber and Information Technology Crimes. The law has been published in the Official Gazette and is set to come into force on 15 August 2018. The law establishes data protection regulation by defining personal data and governmental data, and obligating service providers to protect such data from unauthorised disclosure or misuse (Article 1). Service providers must also ensure the confidentiality of user data and are prohibited from revealing it without a judicial order (Article 2).
Original source