Two-Minute Recap Data Protection Law Matters In Türkiye

Turkish Government Sets Q3 2027 Target for GDPR Alignment

On 6 September 2026, Türkiye’s Medium-Term Programme (2027–2029) was published in Official Gazette No. 33362 (Duplicate Issue). Under the “Business and Investment Environment” policy area, the Programme identifies the completion of the process of aligning Personal Data Protection Law No. 6698 (“KVKK”) with the EU General Data Protection Regulation (“GDPR”) as a legislative and administrative measure targeted for the third quarter of 2027.

The measure forms part of the government’s broader objectives of improving regulatory quality, strengthening predictability and facilitating administrative processes. The Programme further provides that public institutions’ legislative and implementation activities will be guided by its policy framework, with detailed measures for the first year to be set out in the 2027 Presidential Annual Programme. The stated timeline establishes a target for completing the alignment process, while the