ARTICLE · 14 MARCH 2024

New Personal Data Protection Law To Take Effect From June 1, 2024

Gunay Erdogan Attorneys-at-Law

Explore more from Gunay Erdogan Attorneys-at-Law

The Turkish Parliament has recently enacted on March 12, 2024 significant amendments (the "Amendments") to the Turkish Personal Data Protection Law...

TurkeyPrivacy

Yavuz Selim Günay

Çiğdem Gizem Okkaoğlu

Başak Devecioğlu

The Turkish Parliament has recently enacted on March 12, 2024 significant amendments (the "Amendments") to the Turkish Personal Data Protection Law ("PDPL"). We present below a summary of these Amendments, which will enter into force on June 1, 2024.

Enacted by the Turkish Parliament, these Amendments represent a pivotal step towards aligning Turkiye's data protection standards with global best practices. This article provides a comprehensive examination of the Amendments to the PDPL, highlighting the key revisions and their implications for data controllers, data processors and data subjects alike.

Processing of Sensitive Personal Data:

Under the previous PDPL, sensitive personal data processing necessitates explicit consent from the data subject, with limited exceptions permitted by law.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

Related Articles

Monitoring Employees’ Corporate Email And Digital Communication Channels In Turkey: The Limits Of An Employer’s Monitoring Authority Under The Personal Data Protection Board’s Principle Decision No. 2026/2035

ADMD/Mavioglu & Alkan Law Office

Sosyal Ağ Sağlayıcılarına Çocuklar İçin Yaş Doğrulama Ve Güvenli Hizmet Sunma Yükümlülükleri Getirildi

Ozbilen Aykut Attorneyship

Türkiye’de Çalişanlarin Kurumsal E-Posta Ve Dijital İletişim Kanallarinin Denetlenmesi: KVKK Kurulu’nun 2026/2035 Sayili İlke Karari Çerçevesinde İşverenin Denetim Yetkisinin Sinirlari

ADMD/Mavioglu & Alkan Law Office

Social Network Providers Are Required To Implement Age Verification And Child-Specific Safety Measures

Ozbilen Aykut Attorneyship

Data Subject Requests: The Authority Clarifies Response And Notification Requirements

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

Comparative Guide

Data Protection & Cybersecurity

See more popular content from

Privacy

Quick Read: Data Protection & Cybersecurity Updates In Türkiye – January 2026

In January 2026, the Turkish Personal Data Protection Authority (the "DPA") issued several public announcements and published six data breach notifications.

Protecting Minors In The Digital Environment

This article examines the protection of minors in digital services through a comparative legal analysis directed at foreign platforms and families. It distinguishes access restrictions, age assurance, parental authority, personal-data processing and routes of challenge.

ONGUR & PARTNERS

The Personal Data Protection Authority Public Announcement On Transferring Personal Data Of Turkish Citizens Residing Abroad

Following numerous filings from Turkish citizens, residing abroad, concerning transfer and sharing of their personal data with institutions and organizations of other countries, the Personal Data Protection Authority ...

Deris Attorney At Law Partnership

KVKK Yurt Dışı Veri Aktarım Rehberi

6698 sayılı Kişisel Verilerin Korunması Kanunu’nun (“KVKK”) 9 uncu maddesi kapsamında kişisel verilerin yurtdışına aktarımlarının uygulanması ile Kişisel Verileri Koruma Kurulu’nun (“Kurul”) beklediği uygun güvenceler hakkında kamuoyunun aydınlatılması amacıyla Kişisel Verileri Koruma Kurumu (“Kurum”) tarafından 2 Ocak 2025 tarihinde Kişisel Verilerin Yurt Dışına Aktarılması Rehberi (“Rehber”) yayımlanmıştır.

Barlas & Karabucak Law Firm

Differences Between The KVKK And The GDPR

Pursuant to Article 3 of the Law No. 6698 on the Protection of Personal Data (“KVKK”), personal data is defined as any information relating to an identified or identifiable natural person. Although the concept is expressed in these terms under Turkish law, different legal systems adopt different approaches.

ADMD/Mavioglu & Alkan Law Office

KVKK Yurt Dışına Veri Aktarımı Rehberi (2026 Güncel Düzenlemeler)

Türkiye'de kişisel verilerin yurt dışına aktarılması süreci, 10 Temmuz 2024'te yayımlanan yönetmelik ve 2026 yılı itibarıyla tam kapasite çalışan dijital bildirim...

ESENYEL & PARTNERS Lawyers and Consultants

Data Protection And Privacy Law In Türkiye Key Developments And Predictions - 2026

This comprehensive report examines the evolving landscape of personal data protection in Türkiye, analyzing regulatory developments, enforcement trends, and emerging compliance challenges through 2025 and into the first half of 2026. The analysis covers the Turkish Personal Data Protection Authority's expanding guidance framework, significant enforcement actions totaling TRY 352.5 million in fines, and critical regulatory shifts including new cybersecurity legislation and constitutional court decisions

Gün + Partners

Cross-Border Transfer Of Personal Data And Key Considerations

Technological developments, the widespread use of cloud-based services, the operation of companies within multinational group structures and the increasing reliance on service providers located abroad have made cross-border transfers of personal data an integral part of companies’ day-to-day business activities.

Sakar Law Office

Personal Data Protection Monthly Newsletter: October - November

As of November 14, 2023, five data breach notifications were published on the website of the Personal Data Protection Authority ("Authority").

The New Adequacy Decision For EU-US Data Transfers

On July 10, 2023, the European Union ("EU")-United States of America ("US") adequacy decision for adequate level of protection regarding the transfer of personal data under the EU-US Data Privacy Framework ("DPF") was formally adopted by the European Commission.

Kolcuoglu Demirkan Koçakli