August 2026 – A number of important regulatory and policy developments were introduced across Türkiye's data protection, cybersecurity, and digital governance framework in July 2026.
The Turkish DPA issued two Principle Decisions and further public guidance addressing the personal data of accident victims and data used for third-party marketing. Significant legislative amendments also introduced a framework for reassessing previous medical diagnoses and strengthened the rules governing the retention and subsequent use of genetic examination results.
Beyond data protection, the Cybersecurity Presidency was granted broader powers relating to internet infrastructure and services, while new advertising rules introduced transparency requirements for AI-generated content and targeted advertising.
