255 results found

Turkish Personal Data Protection Authority has published an announcement on measures to be taken to ensure website/mobile application user security, on its website on 15 February 2022.

The term "Deepfake" is a combination of "deep learning" and "imitation". Deep learning algorithms, trained on large datasets, can realistically imitate human faces,..

Pursuant to the decision of the Information and Communication Technologies Board ("Board") dated 13 September 2025 and numbered 2025/DK-BTD/300 ("Decision"), a draft regulation ("Draft Regulation") amending the Internet Domain Names Regulation ("Regulation") has been published for public opinion.

On 28th of September, California has passed Senate Bill No. 327 regarding Internet of Things (IoT).

The Constitutional Court in its decision dated 12.10.2023 and numbered 2020/7518, published in the Official Gazette dated 15.12.2023, determined that the deficiencies in the proceedings...

The military uses two techniques of data collection and information gathering for their observations; covert techniques and overt techniques.

The standards address technical and procedural elements, as well as the information which customers must receive during transactions.

On 29 April 2026, EU lawmakers and Member States failed to reach an agreement on proposed amendments to the EU Artificial Intelligence Act (“AI Act”) following approximately twelve hours of negotiations conducted under the European Commission’s Digital Omnibus initiative. The discussions focused on postponing certain AI Act obligations, including rules applicable to high-risk AI systems, until December 2027

On January 20, 2026, the European Commission (the "Commission") introduced a new cybersecurity initiative to strengthen the EU's resilience and capabilities in response to growing threats.

The Turkish Banking Regulation and Supervision Agency has released a draft regulation, namely the Draft Regulation on the Information Systems of the Banks and Electronic Banking Services, which was published ...

The Belgian data protection authority has ordered four major news websites to bring their cookie banners into compliance with of the General Data Protection Regulation ("GDPR") after complaints from noyb...

On 10 October 2026, the Regulation on the Provision of Differentiated Services for Children and Age Verification by Social Network Providers (the "Regulation") was published in the Official Gazette. Issued by the Cyber Security Presidency, the Regulation introduces mandatory age verification, restrictions on children's access to social networks and additional safeguards for users aged 15 to 17.

During the meeting, data “sovereignty” and cybersecurity were emphasized as integral components of national sovereignty. In this context, strengthening Türkiye’s position in the increasingly competitive global cybersecurity landscape was identified as a strategic priority.

On 24 April 2025, the UK's Information Commissioner's Office fined AFK Letters Co Ltd ("AFK") 90,000 euros for breaching privacy laws by making over 95,000 unsolicited marketing calls to individuals listed on the Telephone Preference Service.

On 11 September 2026, reporting obligations under the Cyber Resilience Act (“CRA”) became applicable. Manufacturers must report actively exploited vulnerabilities and severe incidents affecting product security through the Single Reporting Platform. An early warning is due within 24 hours of becoming aware, followed by a fuller notification within 72 hours. Final reports are due within 14 days after a corrective measure becomes available for vulnerabilities and within one month after the 72-hour notification for severe incidents. The CRA’s main product requirements apply from December 2027.

The Capital Markets Board of Türkiye (the "CMB") published the Communiqué on Principles and Procedures on Management of Information Systems numbered VII-128.10 (the "Information Systems Communiqué").

Turkiye has taken an important step toward reinforcing its national cybersecurity architecture with the enactment of Cybersecurity Law No. 7545, which entered into force upon its publication in the Official Gazette numbered 32846 and dated March 19, 2025.

On 12 March 2025, the Turkish Parliament adopted a landmark Cybersecurity Law, officially published in the Official Gazette on 19 March 2025, marking its formal entry into force