March 2026 – February 2026 was a particularly active month for technology law developments in Türkiye, with the Turkish Personal Data Protection Authority (the “DPA”) issuing a principle decision affecting retail practices, publishing new cybersecurity warnings, and initiating AI-related investigations, alongside broader regulatory developments signalling heightened scrutiny on the protection of children’s personal data, as well as the launch of a public consultation on Türkiye’s Artificial Intelligence Action Plan.
(Retail Practices in Focus: DPA Tightens Rules on Loyalty Card Use
On 28 February 2026, the DPA issued a Principle Decision addressing the use of loyalty card details during shopping transactions.