255 results found

This short article embarks on an exploration of the nuanced interpretations of liability and obligation for taking security measures under the General Data Protection Regulation (GDPR) and the Europol Regulation, focusing on landmark cases that test these legal waters.

In July 2025, the Polish Data Protection Authority ("PDPO") imposed a significant GDPR fine of PLN 16.9 million (approximately EUR 4 million) on McDonald's Polska.

The Presidential Circular numbered 2019/2 on Information and Communication Security Measures (the "Circular") was published in Official Gazette number 30823 on 6 July 2019.

Law 7251 on the Amendment of the Civil Procedure Code and Certain Laws entered into force upon publication in the Official Gazette (31199) on 28 July 2020. Article 17 of the Law 7251 amended...

As the digital transformation in the financial sector continues to spread rapidly on a global scale, the regulations of Türkiye, the European Union ("EU"), and the United States ("US") play a significant role in shaping this next-generation banking model.

March 2020 – The Law Amending the Banking Law and Other Laws No.7222 (the "Amending Law"), published in the Official Gazette dated 25 February 2020 and numbered 31050...

Kötü niyetli üçüncü kişilerce bu verilerin arşivlenerek veri setleri hâlinde yeniden pazarlandığı.

In January 2026, the Turkish Personal Data Protection Authority (the "DPA") issued several public announcements and published six data breach notifications.

This data is archived and remarketed as data sets by malicious third parties.

October is celebrated worldwide as a "Cybersecurity Awareness Month".

The Action Plan has been developed in line with the Presidential Circular No. 2026/2, dated 3 February 2026 (the "Circular"), which calls for a holistic approach to addressing the impacts of digital transformation on children, and serves as a strategic roadmap for translating the priorities set out in the Circular into concrete action.

Pursuant to duplicated sub-article (B) of Article 298 of Tax Procedure Law, the revaluation rate has been published in the Official Gazette numbered 31672 and dated 27.11.2021.

The responsibilities incumbent upon companies providing electronic communication services, networks, or operating infrastructure...

On 5 May 2026, the Cybersecurity Board convened under the chairmanship of the President of the Republic of Türkiye and evaluated key matters concerning Türkiye’s national cybersecurity framework.

The Cybersecurity Law No. 7545 ("Law") was published at the Official Gazette dated March 19, 2025 and entered into force as of its publication date.

Establishment of Cybersecurity Presidency in Turkey is declared in the circuit of the Official Gazette dated January 8, 2025 and numbered 32776.

The rapid development of artificial intelligence (AI) technologies and the widespread use of generative artificial intelligence systems also bring the need to regulate artificial intelligence.

November 2025 – In October 2025, the Turkish Personal Data Protection Authority (the "DPA") organised several events and announced four data breach notifications.