Turkiye: Personal Data Protection Authority issued guide on protection of data in the payment and electronic money sector

On 11 April 2025, the Personal Data Protection Authority published a guide on data protection in the payment and electronic money sector. The guide provides practical guidance for data controllers, including electronic money institutions, point of sale service providers, mobile payment service providers, bill payment intermediaries, and money transfer intermediaries. The guidance addresses areas such as the roles of data controllers and processors, legal bases for data processing, and rules for data transfers. It also sets out data security obligations adapted to the specific activities of entities in the sector, in line with national data protection legislation.