The Concepts Of Personal Data, Data Processor, Data Controller And Contact Person Within The Scope Of Personal Data Protection Legislation

Introduction

The Law on Personal Data Protection ("Law") numbered 6698, which has been issued as a part of the European Union compliance process, has been published in the Official Gazette numbered 29677 and dated 7 April 2016 and has entered into force. The Board of Personal Data Protection ("Board") has been constituted in order to enforce this code, and the Personal Data Protection Authority ("Authority") has been established and has come into operation.

The concepts such as "Personal Data," "Data Processor," "Data Controller," and "Contact Person" have been introduced through enactment of the Law. In this article, we shed light on these concepts, which are important for the determination of the obligations and compliance to the Law, and which are commonly confused by data controllers, especially during their compliance processes.