On 24 November 2025, the Turkish Personal Data Protection
Authority ("DPA") published the
"Guideline on Generative Artificial Intelligence and the
Protection of Personal Data (15 Questions) (the
"Guideline"). The Guideline explains how
the development and use of generative artificial intelligence
("Generative AI") must be aligned with
Law No. 6698 on the Protection of Personal Data ("DP
Law").
Rather than treating Generative AI as a purely technological
concept, the DPA examines it as a form of personal data processing
throughout the entire AI lifecycle and sets out concrete
expectations for organisations that develop, deploy, or use such
systems.
The key points of the Guideline are summarised below.
