ARTICLE · 29 JANUARY 2026

Quick Read: Data Protection Law Updates In Türkiye – December 2025

KST LAW

Explore more from KST LAW

January 2026 – In December 2025, the Turkish Personal Data Protection Authority (the "DPA") organised several events and announced six data breach notifications.

TurkeyPrivacy

Hatice Nur Arslan

January 2026 – In December 2025, the Turkish Personal Data Protection Authority (the “DPA”) organised several events and announced six data breach notifications. In this edition of the Quick Read, we highlight notable updates in both data protection and cybersecurity in Türkiye.

2026 Update: Turkish Data Protection Fines Revaluated

The administrative fines set out under Article 18 of the Turkish Personal Data Protection Law (“DP Law”) have been revaluated for 2026 in accordance with the Misdemeanours Law No. 5326, based on the official revaluation rate announced for 2026. Below is a snapshot of the updated administrative fine ranges applicable as of 2026, together with approximate EUR equivalents for ease of reference.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

Related Articles

New Regulations In Türkiye On Age Verification And Provision Of Seperate Services For Children By Social Network Providers

Gün + Partners

Digital Transformation In Packaging: Compliance Deadlines For E-Leaflets, QR Codes, And Anti-Tampering

ELIG Gürkaynak Attorneys-at-Law

Veri Koruma Hukuku Gündemi Eylül 2026

Data Protection Law Updates September 2026

Turkiye Introduces New Age Verification And Child Protection Requirements For Social Network Providers

Balcioglu Selçuk Eymirlioglu Ardiyok Keki Attorney Partnership

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

Comparative Guide

Data Protection & Cybersecurity

See more popular content from

Privacy

Turkiye Introduces New Age Verification And Child Protection Requirements For Social Network Providers

On 10 October 2026, the Regulation on the Provision of Differentiated Services for Children and Age Verification by Social Network Providers (the "Regulation") was published in the Official Gazette. Issued by the Cyber Security Presidency, the Regulation introduces mandatory age verification, restrictions on children's access to social networks and additional safeguards for users aged 15 to 17.

Balcioglu Selçuk Eymirlioglu Ardiyok Keki Attorney Partnership

Turkey Introduces Age Verification And Child Account Obligations For Social Networks

The Regulation will take effect on 1 November 2026 and allows until 31 March 2027 for existing accounts, and as the relevant sanction provisions of Law No. 5651 will apply to breaches of its obligations, social network providers should review their registration flows, child accounts and objection processes before the effective date.

New Regulations For Protecting Children On Social Media In Turkey Minimum Age, Age Verification & Parental Controls

While the widespread use of social media by children offers significant opportunities for communication and access to information, it also presents various risks, including exposure to harmful content, cyberbullying, online exploitation, and threats to the protection of personal data. These risks have increased the importance of legal regulations aimed at protecting children in the digital environment.

ADMD/Mavioglu & Alkan Law Office

New Age Verification And Child-Specific Service Obligations Introduced For Social Network Providers

Turkey's new regulation mandates strict age verification and child-specific protections for social media platforms, prohibiting services to users under 15 and requiring segregated, privacy-enhanced accounts for those aged 15-17. Social network providers must implement parental controls, restrict targeted advertising and profiling, and establish transparent appeal mechanisms, with enforcement beginning November 2026.

Moroglu Arseven

Protecting Minors In The Digital Environment

This article examines the protection of minors in digital services through a comparative legal analysis directed at foreign platforms and families. It distinguishes access restrictions, age assurance, parental authority, personal-data processing and routes of challenge.

ONGUR & PARTNERS

KVKK Yurt Dışına Veri Aktarımı Rehberi (2026 Güncel Düzenlemeler)

Türkiye'de kişisel verilerin yurt dışına aktarılması süreci, 10 Temmuz 2024'te yayımlanan yönetmelik ve 2026 yılı itibarıyla tam kapasite çalışan dijital bildirim...

ESENYEL & PARTNERS Lawyers and Consultants

Quick Read: Data Protection & Cybersecurity Updates In Türkiye – January 2026

In January 2026, the Turkish Personal Data Protection Authority (the "DPA") issued several public announcements and published six data breach notifications.

The Personal Data Protection Authority Public Announcement On Transferring Personal Data Of Turkish Citizens Residing Abroad

Following numerous filings from Turkish citizens, residing abroad, concerning transfer and sharing of their personal data with institutions and organizations of other countries, the Personal Data Protection Authority ...

Deris Attorney At Law Partnership

Data Protection Law In Turkey (KVKK): Compliance Obligations For Businesses

This article examines Turkey's personal data protection framework under Law No. 6698 from the perspective of companies operating in, selling into or otherwise handling data connected with the Turkish market. It addresses the distinction between data controllers and processors, lawful processing, the information duty, the 2024 reform of special-category data and cross-border transfers, the 2025 VERBIS exemption update, data subject requests, breach response and enforcement.

ONGUR & PARTNERS

KVKK Yurt Dışı Veri Aktarım Rehberi

6698 sayılı Kişisel Verilerin Korunması Kanunu’nun (“KVKK”) 9 uncu maddesi kapsamında kişisel verilerin yurtdışına aktarımlarının uygulanması ile Kişisel Verileri Koruma Kurulu’nun (“Kurul”) beklediği uygun güvenceler hakkında kamuoyunun aydınlatılması amacıyla Kişisel Verileri Koruma Kurumu (“Kurum”) tarafından 2 Ocak 2025 tarihinde Kişisel Verilerin Yurt Dışına Aktarılması Rehberi (“Rehber”) yayımlanmıştır.

Barlas & Karabucak Law Firm