In this report, we address the latest developments in the field of personal data protection in Turkiye, the decisions taken and guidelines published, as well as the fundamental regulations, principles and developments of personal data protection law, and the current issues, expectations and assessments in this field. We will also discuss the key developments from last year (2025) and the current issues that have arisen up to the first half of 2026.
2025 marked a pivotal year for data protection in Türkiye, with significant developments in both the regulatory framework and enforcement landscape. Throughout the year, the Turkish Personal Data Protection Authority (the "Authority") continued to shape compliance expectations through the publication of guidance documents, principle decisions, and public announcements, particularly in relation to cross-border data transfers, data security, digital platforms, and artificial intelligence ("AI").