Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 28 AUGUST 2026

Cross-Border Transfer Of Personal Data And Key Considerations

Sakar Law Office
Sakar Law Office
Contributor
Sakar Law Office

Sakar Law Office

Sakar is a client and solution oriented, investigative and innovative law firm based in Istanbul....

View firm profile
Explore more from Sakar Law Office

Technological developments, the widespread use of cloud-based services, the operation of companies within multinational group structures and the increasing reliance on service providers located abroad have made cross-border transfers of personal data an integral part of companies’ day-to-day business activities.

TurkeyPrivacy
Gözde Esen Sakar
Gözde Esen Sakar
Neslihan Kuvvet
Neslihan Kuvvet
Author LinkedIn connections

A. Introduction

Technological developments, the widespread use of cloud-based services, the operation of companies within multinational group structures and the increasing reliance on service providers located abroad have made cross-border transfers of personal data an integral part of companies’ day-to-day business activities.

Against this background, Article 9 of the Law on the Protection of Personal Data No. 6698 (the “Law”), titled “Transfer of Personal Data Abroad”, was substantially amended by Law No. 7499, published in the Official Gazette on 12 March 2024. The amendments entered into force on 1 June 2024. Subsequently, the Regulation on the Procedures and Principles Regarding the Cross-Border Transfer of Personal Data (the “Regulation”) was published and entered into force on 10 July 2024.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

Turkiye Introduces New Age Verification And Child Protection Requirements For Social Network Providers

On 10 October 2026, the Regulation on the Provision of Differentiated Services for Children and Age Verification by Social Network Providers (the "Regulation") was published in the Official Gazette. Issued by the Cyber Security Presidency, the Regulation introduces mandatory age verification, restrictions on children's access to social networks and additional safeguards for users aged 15 to 17.
TurkeyPrivacy
Balcioglu Selçuk Eymirlioglu Ardiyok Keki Attorney Partnership
Balcioglu Selçuk Eymirlioglu Ardiyok Keki Attorney Partnership
Article

New Regulations For Protecting Children On Social Media In Turkey Minimum Age, Age Verification & Parental Controls

While the widespread use of social media by children offers significant opportunities for communication and access to information, it also presents various risks, including exposure to harmful content, cyberbullying, online exploitation, and threats to the protection of personal data. These risks have increased the importance of legal regulations aimed at protecting children in the digital environment.
TurkeyPrivacy
ADMD/Mavioglu & Alkan Law Office
ADMD/Mavioglu & Alkan Law Office
Article

KVKK Yurt Dışı Veri Aktarım Rehberi

6698 sayılı Kişisel Verilerin Korunması Kanunu’nun (“KVKK”) 9 uncu maddesi kapsamında kişisel verilerin yurtdışına aktarımlarının uygulanması ile Kişisel Verileri Koruma Kurulu’nun (“Kurul”) beklediği uygun güvenceler hakkında kamuoyunun aydınlatılması amacıyla Kişisel Verileri Koruma Kurumu (“Kurum”) tarafından 2 Ocak 2025 tarihinde Kişisel Verilerin Yurt Dışına Aktarılması Rehberi (“Rehber”) yayımlanmıştır.
TurkeyPrivacy
Barlas & Karabucak Law Firm
Barlas & Karabucak Law Firm
Article

New Age Verification And Child-Specific Service Obligations Introduced For Social Network Providers

Turkey's new regulation mandates strict age verification and child-specific protections for social media platforms, prohibiting services to users under 15 and requiring segregated, privacy-enhanced accounts for those aged 15-17. Social network providers must implement parental controls, restrict targeted advertising and profiling, and establish transparent appeal mechanisms, with enforcement beginning November 2026.
TurkeyPrivacy
Moroglu Arseven
Moroglu Arseven
Article

Türkiye Ulusal Yapay Zekâ Stratejisi Eylem Planına Genel ve Hukuki Bir Bakış

Sanayi ve Teknoloji Bakanlığı (“Bakanlık”) tarafından 18 Ağustos 2026 tarihinde yayımlanan 2026–2030 Türkiye Yapay Zekâ Eylem Planı (“Eylem Planı”), Türkiye'nin yapay zekâ ekosistemini kapsayıcı bir hukuki, teknik ve ekonomik çerçevede yapılandırmayı hedefleyen 16 öncelikli eylemi ortaya koymaktadır. “Fark Et”, “İstifade Et”, “Üret” ve “Yönet” şeklinde dört temel eksen üzerine inşa edilen Eylem Planı; insan odaklılık, etik sorumluluk, güvenilirlik, sürdürülebilir kalkınma ve dijital egemenlik ilkelerini benimsemektedir.
TurkeyTechnology
Sakar Law Office
Sakar Law Office
Article

Inheritance Fraud Lawsuits: Legal Nature, Requirements, And Litigation Process

Inheritance fraud (muris muvazaası) is one of the most common inheritance-related disputes in Turkish legal practice. It typically arises when a deceased person (the decedent) transfers real property to one heir by disguising what is, in reality, a gratuitous transfer (gift) as a sale or a contract of maintenance until death, with the intention of depriving the remaining heirs of their inheritance rights. Although such transactions appear legally valid on their face, they do not reflect the parties' true intentions and are therefore evaluated under the legal principles governing sham transactions (muvazaa).
TurkeyLitigation, Mediation & Arbitration
Sakar Law Office
Sakar Law Office