On 26 January 2026, the Personal Data Protection Center (PDPC) released Version 1.1 of the Data Protection Officer Guidelines. These Guidelines assist data users in complying with the Personal Data Protection Law enacted by Law No. 151 of 2020 and the Executive Regulations issued by Decision No. 816 of 2025. Juridical persons acting as data users must appoint a Data Protection Officer (DPO) regardless of processing scale. Natural persons acting as data users may appoint a DPO or personally assume the obligations. The DPO oversees compliance, manages data subject requests, and serves as the point of contact with the PDPC. Candidates must register in the electronic DPO Registry. Registration requires meeting qualification criteria including an academic degree or professional credentials and successful completion of the PDPC exam .
Original source