Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 06 OCTOBER 2025

OneTrust DataGuidance | Turkey – Data Breach Guidance Note

Hamzaoglu Hamzaoglu Kinikoglu Attorney Partnership
Hamzaoglu Hamzaoglu Kinikoglu Attorney Partnership
Contributor
Explore more from Hamzaoglu Hamzaoglu Kinikoglu Attorney Partnership

Our latest contribution to OneTrust DataGuidance provides a comprehensive overview of the legal framework governing data breaches in Turkey.

TurkeyPrivacy
Hamzaoglu Hamzaoglu Kinikoglu Attorney Partnership
Hamzaoglu Hamzaoglu Kinikoglu Attorney Partnership

OneTrust DataGuidance | Turkey – Data Breach Guidance Note

November 17, 2023

Our latest contribution to OneTrust DataGuidance provides a comprehensive overview of the legal framework governing data breaches in Turkey. The article outlines key regulatory requirements, including breach notification obligations, enforcement trends, and practical considerations for organizations managing data breach incidents under Turkish data protection law.

Read the full article on OneTrust DataGuidance

https://www.dataguidance.com/notes/turkey-data-breach

OneTrust DataGuidance | Insight Article – EU: Unveiling the political agreement on the EU AI Act

December 27, 2023

Our recent opinion piece published by OneTrust DataGuidance examines the political agreement reached on the EU AI Act. The article explores key elements of the proposed regulation, its risk-based approach, and the broader implications for businesses operating within and outside the European Union. It

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

Turkiye Introduces New Age Verification And Child Protection Requirements For Social Network Providers

On 10 October 2026, the Regulation on the Provision of Differentiated Services for Children and Age Verification by Social Network Providers (the "Regulation") was published in the Official Gazette. Issued by the Cyber Security Presidency, the Regulation introduces mandatory age verification, restrictions on children's access to social networks and additional safeguards for users aged 15 to 17.
TurkeyPrivacy
Balcıoğlu Selçuk Eymirlioğlu Ardıyok Keki Attorney Partnership
Balcıoğlu Selçuk Eymirlioğlu Ardıyok Keki Attorney Partnership
Article

New Regulations For Protecting Children On Social Media In Turkey Minimum Age, Age Verification & Parental Controls

While the widespread use of social media by children offers significant opportunities for communication and access to information, it also presents various risks, including exposure to harmful content, cyberbullying, online exploitation, and threats to the protection of personal data. These risks have increased the importance of legal regulations aimed at protecting children in the digital environment.
TurkeyPrivacy
ADMD/Mavioglu & Alkan Law Office
ADMD/Mavioglu & Alkan Law Office
Article

New Age Verification And Child-Specific Service Obligations Introduced For Social Network Providers

Turkey's new regulation mandates strict age verification and child-specific protections for social media platforms, prohibiting services to users under 15 and requiring segregated, privacy-enhanced accounts for those aged 15-17. Social network providers must implement parental controls, restrict targeted advertising and profiling, and establish transparent appeal mechanisms, with enforcement beginning November 2026.
TurkeyPrivacy
Moroglu Arseven
Moroglu Arseven
Article

Data Protection Law In Turkey (KVKK): Compliance Obligations For Businesses

This article examines Turkey's personal data protection framework under Law No. 6698 from the perspective of companies operating in, selling into or otherwise handling data connected with the Turkish market. It addresses the distinction between data controllers and processors, lawful processing, the information duty, the 2024 reform of special-category data and cross-border transfers, the 2025 VERBIS exemption update, data subject requests, breach response and enforcement.
TurkeyPrivacy
ONGUR & PARTNERS
ONGUR & PARTNERS
Article

KVKK Yurt Dışı Veri Aktarım Rehberi

6698 sayılı Kişisel Verilerin Korunması Kanunu’nun (“KVKK”) 9 uncu maddesi kapsamında kişisel verilerin yurtdışına aktarımlarının uygulanması ile Kişisel Verileri Koruma Kurulu’nun (“Kurul”) beklediği uygun güvenceler hakkında kamuoyunun aydınlatılması amacıyla Kişisel Verileri Koruma Kurumu (“Kurum”) tarafından 2 Ocak 2025 tarihinde Kişisel Verilerin Yurt Dışına Aktarılması Rehberi (“Rehber”) yayımlanmıştır.
TurkeyPrivacy
Barlas & Karabucak Law Firm
Barlas & Karabucak Law Firm
Article

Ödeme Hizmetlerinde Veri Paylaşım Servisleri Rehberine İlişkin Bilgi Notu

Ödeme Hizmetleri Ödeme ve Menkul Kıymet Mutabakat Sistemleri, Ödeme Hizmetleri ve Elektronik Para Kuruluşları Hakkında Kanun'un ("Kanun") m.12(f) ve m.12(g) bendinde düzenlenen ödeme emri başlatma ve hesap bilgisi sağlama hizmetleri Ödeme Hizmetlerinde Veri Paylaşım Servisleri ("ÖHVPS") ve açık bankacılık servisleri olarak tanımlanmaktadır.
TurkeyFinance and Banking
Hamzaoglu Hamzaoglu Kinikoglu Attorney Partnership
Hamzaoglu Hamzaoglu Kinikoglu Attorney Partnership
Article

İşveren Tarafından Çalışanın Kişisel Verilerine Erişimine İlişkin Aym'nin 13.02.2024 Tarihli Ve 2020/36976 Sayılı Kararı Hakkında Bilgi Notu

Anayasa Mahkemesi ("AYM"), 22.04.2024 tarihli Resmî Gazete'de yayımlanan 13.02.2024 tarihli ve 2020/36976 başvuru numaralı kararında ("Karar"), Anayasa'nın 20. Maddesinde yer alan özel hayata saygı hakkı kapsamındaki kişisel verilerin korunmasını isteme hakkının ihlal edildiğine karar verdi.
TurkeyPrivacy
Hamzaoglu Hamzaoglu Kinikoglu Attorney Partnership
Hamzaoglu Hamzaoglu Kinikoglu Attorney Partnership