The responsibilities incumbent upon companies providing
electronic communication services, networks, or operating
infrastructure ("Operators") concerning the data they
acquire in Turkey during service provision are delineated by the
Electronic Communications Law No. 5809 dated November 5, 2008
("Law No. 5809") and the Regulation on the Processing of
Personal Data and Protection of Confidentiality in the Electronic
Communications Sector ("Regulation") published in the
Official Gazette dated December 4, 2020, numbered 31324 by the
Information Technologies and Communication Authority
("ITCA"). According to the legislation, Operators bear
direct responsibility for ensuring the confidentiality, security,
and purposeful use of personal data.