KVKK Data Transactions Guideline

1. INTRODUCTION

On January 2, 2025, the Personal Data Protection Authority (“Authority“) published the Guideline on the Cross-Border Transaction of Personal Data Cross-border (“Guideline“) in order to enlighten the public on the implementation of transactions of personal data cross-border within the scope of Article 9 of the Personal Data Protection Law No. 6698 (“KVKK“) and the appropriate safeguards expected by the Personal Data Protection Board (“Board“).¹

This Guideline paves the way for the public to understand the changes made in the foreign data transaction procedures and to ensure that the practices comply with the KVKK and the Board’s expectations.

1. PURPOSE, JUSTIFICATION AND SCOPE OF THE AMENDMENTS TO THE PROCEDURES AND PRINCIPLES REGARDING THE CROSS-BORDER TRANSACTION OF PERSONAL DATA