The Personal Data Protection Authority
("Authority") has issued a Public
Announcement dated 14 January 2026
("Announcement").
The Authority has published a public announcement addressing the
compliance of push notifications sent to users via mobile
applications with the Turkish Personal Data Protection Law No. 6698
("Law"). The announcement was issued
following investigations conducted in relation to similar
complaints submitted to the Authority and aims to inform the public
of the findings and legal assessments reached in this context.
The Authority states that, with respect to push notifications
sent by mobile application providers acting as data controllers,
although such notifications are technically based on permissions
obtained from users, it must be separately assessed whether these
permissions constitute legally valid explicit consent.
