Turkiye: Personal Data Protection Authority published public announcement on push notifications sent via mobile applications

On 14 January 2026, Personal Data Protection Authority (KVKK) published a public announcement on push notifications sent via mobile applications, following complaints submitted to KVKK. The announcement concerns the of push notifications with data protection obligations, including in the context of the framework of Law No. 6698 on the Protection of Personal Data. The KVKK identified practices where explicit consent for push notifications was obtained as a single consent covering multiple purposes, including campaign notifications and operational notifications such as real-time order tracking. KVKK stated that explicit consent must be specific, informed, and freely given, and that conditioning service-related notifications on acceptance of marketing notifications removes free choice. The KVKK stated that application providers should separate the purposes of different notifications are separated to enable users manage their preferences fully.