As it is known, the principles of transfer of personal data
abroad are regulated in Article 9 of KVKK. According to this
regulation, in transfers to countries that are not counted among
adequate countries, with a commitment to be signed between the
person to whom the transfer will be made and the person who will
make the transfer, permission must be obtained from the Board.
However, adequate countries have not yet been announced by the
Authority and it is likely that it will take time to identify safe
countries, as we see from the "Criteria to be Based on
Determining Countries with Sufficient Protection" published by
the Authority. Since the adequate countries have not yet been
announced, although people go for permission from the Board, there
are also some difficulties in this process. Considering these
difficulties, the Authority announced the Binding Corporate Rules
institution and announced the method to facilitate data transfer
for multinational group of companies.
