Data Privacy Detective Podcast – Episode 78: Data Localization, The Case Of Turkey

Turkey is the first 2022 stop on our global tour about data localization. What is Turkey's approach to cross-border transfers of personal data about its citizens and residents?

Turkey's Law on Protection of Personal Data is comprehensive and like the European Union's former Data Protection Directive, though it differs in some respects. Data localization is not part of this existing Turkish law. Instead, Turkey takes a sectoral approach to cross-border collection and processing of personal data of its residents. Turkish banks must collect and store Turkish customer data within Turkey. Data localizations requirements apply to payment and electronic money institutions, forcing companies like Paypal or Venmo to locate a payment system within Turkey and to comply with Turkish data privacy regulations. Social media providers must register with and report every six months to Turkish authorities about Turkish social media users.