Share on LinkedInShare on LinkedIn

ARTICLE · 02 NOVEMBER 2017

Regulation On Deletion, Removal, Or Anonymization Of Personal Data Is Published In The Official Gazette

The data controllers shall be obliged to keep all records in relation to deletion or removal of personal data for a minimum period of 3 years.

TurkeyPrivacy

Regulation on Deletion, Removal, or Anonymization of Personal Data (the "Regulation"), one of two anticipated regulations to be drafted within the framework of the Personal Data Protection Law no. 6698 ("PDPL"), is published in the Official Gazette no. 30224 and dated 28 October 2017.

We provide below a summary of the most prevalent provisions under the Regulation:

  • The data controllers who are under the obligation to register with the data controllers' registry shall be required to draft and implement a company-wide "Personal Data Retention and Destruction Policy". The Regulation specifies certain information to be included in the policy and requires such data controllers to destroy the outdated personal data periodically and at maximum 6 monthly intervals.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

See more popular content from