Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 02 JULY 2025

The Personal Data Protection Board Clarified The Conditions Regarding Verification Codes Sent Via SMS

Sakar Law Office
Sakar Law Office
Contributor
Sakar Law Office

Sakar Law Office

Sakar is a client and solution oriented, investigative and innovative law firm based in Istanbul....

View firm profile
Explore more from Sakar Law Office

The Principle Decision ("Decision") numbered 2025/1072, issued by the Personal Data Protection Board ("Board") on June 10, 2025, regarding the processing of personal data through the transmission of verification codes via short message service (SMS) during the provision of goods and services, was published in the Official Gazette dated June 26, 2025, and numbered 32938.

TurkeyPrivacy
Gözde Esen Sakar
Gözde Esen Sakar
Ece Nart
Ece Nart
Author LinkedIn connections

The Principle Decision ("Decision") numbered 2025/1072, issued by the Personal Data Protection Board ("Board") on June 10, 2025, regarding the processing of personal data through the transmission of verification codes via short message service (SMS) during the provision of goods and services, was published in the Official Gazette dated June 26, 2025, and numbered 32938.

This Decision reveals how the practices frequently used by e-commerce and digital service providers in identity verification processes should be evaluated within the scope of the Personal Data Protection Law No. 6698 and clarifies the legal obligations of data controllers in this context.

The Board conducted an investigation based on complaints and notices received regarding the sending of verification codes via SMS to individuals during the provision of products and services (such as during payment, registration, membership, or quotation processes), where the individual is requested to enter the

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

KVKK Yurt Dışı Veri Aktarım Rehberi

6698 sayılı Kişisel Verilerin Korunması Kanunu’nun (“KVKK”) 9 uncu maddesi kapsamında kişisel verilerin yurtdışına aktarımlarının uygulanması ile Kişisel Verileri Koruma Kurulu’nun (“Kurul”) beklediği uygun güvenceler hakkında kamuoyunun aydınlatılması amacıyla Kişisel Verileri Koruma Kurumu (“Kurum”) tarafından 2 Ocak 2025 tarihinde Kişisel Verilerin Yurt Dışına Aktarılması Rehberi (“Rehber”) yayımlanmıştır.
TurkeyPrivacy
Barlas & Karabucak Law Firm
Barlas & Karabucak Law Firm
Article

Data Protection And Privacy Law In Türkiye Key Developments And Predictions - 2026

This comprehensive report examines the evolving landscape of personal data protection in Türkiye, analyzing regulatory developments, enforcement trends, and emerging compliance challenges through 2025 and into the first half of 2026. The analysis covers the Turkish Personal Data Protection Authority's expanding guidance framework, significant enforcement actions totaling TRY 352.5 million in fines, and critical regulatory shifts including new cybersecurity legislation and constitutional court decisions
TurkeyPrivacy
Gün + Partners
Gün + Partners
Article

Türkiye Ulusal Yapay Zekâ Stratejisi Eylem Planına Genel ve Hukuki Bir Bakış

Sanayi ve Teknoloji Bakanlığı (“Bakanlık”) tarafından 18 Ağustos 2026 tarihinde yayımlanan 2026–2030 Türkiye Yapay Zekâ Eylem Planı (“Eylem Planı”), Türkiye'nin yapay zekâ ekosistemini kapsayıcı bir hukuki, teknik ve ekonomik çerçevede yapılandırmayı hedefleyen 16 öncelikli eylemi ortaya koymaktadır. “Fark Et”, “İstifade Et”, “Üret” ve “Yönet” şeklinde dört temel eksen üzerine inşa edilen Eylem Planı; insan odaklılık, etik sorumluluk, güvenilirlik, sürdürülebilir kalkınma ve dijital egemenlik ilkelerini benimsemektedir.
TurkeyTechnology
Sakar Law Office
Sakar Law Office
Article

Inheritance Fraud Lawsuits: Legal Nature, Requirements, And Litigation Process

Inheritance fraud (muris muvazaası) is one of the most common inheritance-related disputes in Turkish legal practice. It typically arises when a deceased person (the decedent) transfers real property to one heir by disguising what is, in reality, a gratuitous transfer (gift) as a sale or a contract of maintenance until death, with the intention of depriving the remaining heirs of their inheritance rights. Although such transactions appear legally valid on their face, they do not reflect the parties' true intentions and are therefore evaluated under the legal principles governing sham transactions (muvazaa).
TurkeyLitigation, Mediation & Arbitration
Sakar Law Office
Sakar Law Office