Turkiye: Personal Data Protection Agency released Generative Artificial Intelligence and Personal Data Protection Guide (in 15 Questions)

Description

Personal Data Protection Agency released Generative Artificial Intelligence and Personal Data Protection Guide (in 15 Questions)

On 24 November 2025, the Personal Data Protection Agency (KVKK) released the Generative Artificial Intelligence and Personal Data Protection Guide (in 15 Questions). The Guide aims to explain the data protection implications generative AI systems and guide data controllers working with generative AI system on how they can fulfil data protection requirements, including those which arise under Law No. 6698 on the Protection of Personal Data. The Guide describes the structure of generative artificial intelligence systems, their content-generation mechanisms, lifecycle stages, usage areas and the associated ethical, legal and technical risks, and shows how personal data may be processed during data collection, model training, fine-tuning, and deployment and user interaction. In relation to these issues, the Guide offers advice to data controllers on questions such as the legal bases for data collection, data transfers abroad, the exercise of data subject rights, and measures for parents of children using generative AI tools.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
ML and AI development
Implementation Level
national
Government Branch
executive
Government Body
data protection authority

Complete timeline of this policy change

Hide details
2025-11-24
adopted

On 24 November 2025, the Personal Data Protection Agency (KVKK) released the Generative Artificial …