On 24 November 2025, the Personal Data Protection Agency (KVKK) released the Generative Artificial Intelligence and Personal Data Protection Guide (in 15 Questions). The Guide aims to explain the data protection implications generative AI systems and guide data controllers working with generative AI system on how they can fulfil data protection requirements, including those which arise under Law No. 6698 on the Protection of Personal Data. The Guide describes the structure of generative artificial intelligence systems, their content-generation mechanisms, lifecycle stages, usage areas and the associated ethical, legal and technical risks, and shows how personal data may be processed during data collection, model training, fine-tuning, and deployment and user interaction. In relation to these issues, the Guide offers advice to data controllers on questions such as the legal bases for data collection, data transfers abroad, the exercise of data subject rights, and measures for parents of children using generative AI tools.
Original source