Turkiye: Personal Data Protection Board adopted decision on preparation of explicit consent and disclosure texts

On 18 February 2026, the Turkish Personal Data Protection Board adopted Decision No. 2026/347 on the separate preparation of explicit consent and disclosure texts, requiring data controllers to prepare these texts separately under Law No. 6698 on Personal Data Protection. The Decision applies to all data controllers processing personal data. The Decision will require that disclosure obligations be fulfilled independently of consent prior to any data processing activity, while explicit consent will be required as a separate, specific, and informed declaration, even if both texts appear on the same page. The Decision will prohibit requesting consent within disclosure texts, will require clear and plain language, and will oblige controllers to specify purposes, legal bases, and data categories accurately. Non-compliance will constitute a breach of data security obligations and result in enforcement action under Article 18 of Law No. 6698.