A Justice Reform Bill containing provisions to amend important
aspects of the Turkish Data Protection Law No. 6698 (DPL) was
submitted to the Turkish Parliament on 16 February 2024.
Focusing on restrictions to cross-border data transfers and the
processing of sensitive data, the Bill marks a first concrete step
towards completing the harmonisation of the DPL with the EU acquis,
especially the European Union General Data Protection Regulation
(GDPR), as described under the Medium Term Programme (2024- 2026)
published by the Turkish Strategy and Budget Directorate in
September 2023.
The preamble to the Bill underlines that the current situation,
especially regarding the transfer of personal data abroad, makes it
almost impossible for companies to use cloud-based software and
applications with servers located outside Turkey, while these are a
common feature in business practice. In this context, the Bill aims
to reorganise the conditions surrounding the transfer of