On 15 August 2018, Law No. 175 of 2018 on Anti-Cyber and Information Technology Crimes entered into force. The law establishes data protection regulation by defining personal data and governmental data, and obligating service providers to protect such data from unauthorised disclosure or misuse (Article 1). Service providers must also ensure the confidentiality of user data and are prohibited from revealing it without a judicial order (Article 2).
Original source