6698 Sayılı Kişisel Verilerin Korunması Kanunu Kapsamında İdari Para Cezası Tutarları

As of November 14, 2023, five data breach notifications were published on the website of the Personal Data Protection Authority ("Authority").

Yazılım projelerinin hukuki altyapısı yalnızca geliştirme sözleşmesinden ibaret değildir. Projenin iş modeline göre KVKK metinleri, kullanıcı sözleşmeleri, lisans koşulları ve veri işleme hükümleri gibi farklı belgeler gerekebilir. Bu kapsamlı rehber, yazılım projelerinde hangi hukuki belgelerin ne zaman ve nasıl hazırlanması gerektiğini, veri sorumluluğu, fikri ha

On 27 August 2026, Turkish Personal Data Protection Authority (“DPA”) published a public announcement clarifying its Personal Data Protection Board’s (“Board”) Principal Decision No. 2026/921 of 29 April 2026 on the processing of biometric data for employee attendance tracking.

Technological developments, the widespread use of cloud-based services, the operation of companies within multinational group structures and the increasing reliance on service providers located abroad have made cross-border transfers of personal data an integral part of companies’ day-to-day business activities.

This comprehensive report examines the evolving landscape of personal data protection in Türkiye, analyzing regulatory developments, enforcement trends, and emerging compliance challenges through 2025 and into the first half of 2026. The analysis covers the Turkish Personal Data Protection Authority's expanding guidance framework, significant enforcement actions totaling TRY 352.5 million in fines, and critical regulatory shifts including new cybersecurity legislation and constitutional court decisions

In January 2026, the Turkish Personal Data Protection Authority (the "DPA") issued several public announcements and published six data breach notifications.

The Personal Data Protection Authority (“Authority”) has published a document entitled Use of Generative AI Tools in the Workplace, setting out a general framework for the use of third-party, publicly accessible GenAI tools in professional settings.

One of most undesirable things to happen in an organization is a personal data breach.

6698 sayılı Kişisel Verilerin Korunması Kanunu’nun (“KVKK”) 9 uncu maddesi kapsamında kişisel verilerin yurtdışına aktarımlarının uygulanması ile Kişisel Verileri Koruma Kurulu’nun (“Kurul”) beklediği uygun güvenceler hakkında kamuoyunun aydınlatılması amacıyla Kişisel Verileri Koruma Kurumu (“Kurum”) tarafından 2 Ocak 2025 tarihinde Kişisel Verilerin Yurt Dışına Aktarılması Rehberi (“Rehber”) yayımlanmıştır.

Türkiye'de kişisel verilerin yurt dışına aktarılması süreci, 10 Temmuz 2024'te yayımlanan yönetmelik ve 2026 yılı itibarıyla tam kapasite çalışan dijital bildirim...

9. Boğaziçi Siber Güvenlik ve KVKK Kariyer Zirvesi'nde yönetici ortaklarımızdan Avukat Selen Ibrahimoglu Gures "Uzaktan Çalışmada Hukuki Süreçler" konusunu anlattı.

If you have not registered with the Message Management System ("IYS") and have not uploaded the consents that you have previously received from your customers...

The Turkish Data Protection Board's (‘TDPB') decision regarding Amazon Turkey Perakende Hizmetleri Ltd. Şti. ("Amazon Turkey") was published on the...

The Ministry of Trade announced today that deadlines for service providers to register with the IYS and upload their approvals to the system has been postponed once again, considering the negative effects of the new type of Coronavirus ...

Pursuant to article 4 of the Law, the definition of trademark has been broadened to include all kinds of symbols.

The deadlines for registration with the Data Controllers Registry ("Registry") are extended by the Data Protection Board ("Board") with its decision dated 27th December 2019 and numbered 2019/387.

The Law is expected to enter into force in the course of April 2016.

We have had our first "KP Talks" panel series on November 5th, 2021.

The long-awaited Advocate General Saugmandsgaard Øe's opinion on Schrems II case was finally published today.

6102 sayılı Türk Ticaret Kanunu'nun ("TTK") 376. maddesi halk arasında "teknik iflas" olarak da bilinen şirketlerin sermayenin kaybı ve borca batık olma durumuna ilişkin yükümlülüklerini düzenlemektedir.