Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 06 MARCH 2026

The Turkish DPA Published A Guideline On The Use Of Generative AI Tools In The Workplace

Fidanci & Esin Partners
Explore more from Fidanci & Esin Partners

On 5 March 2026, the Turkish Personal Data Protection Authority published its guideline titled "Use of Generative Artificial Intelligence Tools in the Workplace".

TurkeyPrivacy
Şevval Bahar Esin
Şevval Bahar Esin
Kemal Fidanci
Kemal Fidanci
Author LinkedIn connections

Recent Development

On 5 March 2026, the Turkish Personal Data Protection Authority (the "DPA") published its guideline titled "Use of Generative Artificial Intelligence Tools in the Workplace" (the "Guideline"). The Guideline addresses the key risks related to employees' use of third-party, publicly accessible generative artificial intelligence ("GAI") tools in business processes, and aims to raise awareness among companies, institutions and organizations and to promote informed use.

Although the Guideline is not binding, it constitutes an important reference source in terms of the DPA's expectations and assessment criteria in this field.

What Does the Guideline Cover?

The Phenomenon of Shadow AI and Its Risks

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

Turkiye Introduces New Age Verification And Child Protection Requirements For Social Network Providers

On 10 October 2026, the Regulation on the Provision of Differentiated Services for Children and Age Verification by Social Network Providers (the "Regulation") was published in the Official Gazette. Issued by the Cyber Security Presidency, the Regulation introduces mandatory age verification, restrictions on children's access to social networks and additional safeguards for users aged 15 to 17.
TurkeyPrivacy
Balcıoğlu Selçuk Eymirlioğlu Ardıyok Keki Attorney Partnership
Balcıoğlu Selçuk Eymirlioğlu Ardıyok Keki Attorney Partnership
Article

New Regulations For Protecting Children On Social Media In Turkey Minimum Age, Age Verification & Parental Controls

While the widespread use of social media by children offers significant opportunities for communication and access to information, it also presents various risks, including exposure to harmful content, cyberbullying, online exploitation, and threats to the protection of personal data. These risks have increased the importance of legal regulations aimed at protecting children in the digital environment.
TurkeyPrivacy
ADMD/Mavioglu & Alkan Law Office
ADMD/Mavioglu & Alkan Law Office
Article

New Age Verification And Child-Specific Service Obligations Introduced For Social Network Providers

Turkey's new regulation mandates strict age verification and child-specific protections for social media platforms, prohibiting services to users under 15 and requiring segregated, privacy-enhanced accounts for those aged 15-17. Social network providers must implement parental controls, restrict targeted advertising and profiling, and establish transparent appeal mechanisms, with enforcement beginning November 2026.
TurkeyPrivacy
Moroglu Arseven
Moroglu Arseven
Article

Data Protection Law In Turkey (KVKK): Compliance Obligations For Businesses

This article examines Turkey's personal data protection framework under Law No. 6698 from the perspective of companies operating in, selling into or otherwise handling data connected with the Turkish market. It addresses the distinction between data controllers and processors, lawful processing, the information duty, the 2024 reform of special-category data and cross-border transfers, the 2025 VERBIS exemption update, data subject requests, breach response and enforcement.
TurkeyPrivacy
ONGUR & PARTNERS
ONGUR & PARTNERS
Article

Sosyal Ağlarda Yaş Doğrulaması Ve Çocuk Hesaplarına İlişkin Yeni Yükümlülükler

Yönetmelik 1 Kasım 2026’da yürürlüğe girecek olup mevcut hesaplar için 31 Mart 2027’ye kadar süre tanımaktadır. Yükümlülüklere aykırılık hâlinde 5651 sayılı Kanun’un ilgili yaptırım hükümleri uygulanacağından sosyal ağ sağlayıcılarının kayıt akışlarını, çocuk hesaplarını ve itiraz süreçlerini yürürlük tarihinden önce gözden geçirmesi gerekmektedir
TurkeyPrivacy
ASY Legal
ASY Legal
Article

Anayasa Mahkemesinden Önalım Hakkının Kullanılmasında Rayiç Bedel Esasına İlişkin İptal Kararı

Anayasa Mahkemesi’nin (“AYM”), 16 Temmuz 2026 tarihli ve E. 2026/23, K. 2026/162 sayılı kararı (“Karar”), 6 Kasım 2026 tarihli ve 33422 sayılı Resmî Gazete’de yayımlanmıştır. AYM, Karar ile 4721 sayılı Türk Medeni Kanunu’nun (“TMK”) önalım hakkının kullanılmasında rayiç bedelin esas alınmasını öngören 734. maddesinin ikinci fıkrasını ve bu düzenlemenin daha önce açılmış davalara da uygulanmasına ilişkin geçici 1. maddesinin ikinci fıkrasını iptal etmiştir.
TurkeyGovernment, Public Sector
Fidanci & Esin Partners
Fidanci & Esin Partners
Article

The Turkish Data Protection Board Issued A Principle Decision On The Monitoring Of Corporate Email And Workplace Communication Channels

The Turkish Data Protection Board’s (“Board”) Principle Decision dated 16 September 2026 and numbered 2026/2035 (“Principle Decision”) was published in the Official Gazette dated 8 October 2026 and numbered 33394. The Principle Decision sets out the procedures and principles applicable to personal data processing activities carried out through the monitoring of communication channels used for work purposes, particularly corporate email accounts assigned to employees by their employers.
TurkeyPrivacy
Fidanci & Esin Partners
Fidanci & Esin Partners
Article

Contractual Protection Of Trade Secrets And Confidential Information: Non-Disclosure Agreements (NDAs) In Light Of Turkish Law Of Obligations And Court Of Cassation Jurisprudence

In the global economic order, as information has become a more strategic form of capital than tangible assets, the legal mechanisms designed to protect it have necessarily evolved. Non-Disclosure Agreements ("NDAs") function as the legal safeguard of trust at every level of the commercial ecosystem, from a simple business meeting to multi-billion-dollar mergers and acquisitions ("M&A") transactions.
TurkeyIntellectual Property
Fidanci & Esin Partners
Fidanci & Esin Partners
Article

Kurumsal E-Posta Ve İş Yeri İletişim Kanallarının Denetlenmesine İlişkin KVKK İlke Kararı

Kişisel Verileri Koruma Kurulu’nun (“Kurul”), 16.09.2026 tarihli ve 2026/2035 sayılı İlke Kararı (“İlke Kararı”), 8 Ekim 2026 tarihli ve 33394 sayılı Resmî Gazete’de yayımlanmıştır. İlke Kararı, işverenlerin çalışanlara tahsis ettiği kurumsal e-posta hesapları başta olmak üzere, işin yürütülmesi amacıyla kullanılan iletişim kanallarının denetlenmesi suretiyle gerçekleştirilen kişisel veri işleme faaliyetlerinde uyulması gereken usul ve esasları ortaya koymaktadır.
TurkeyPrivacy
Fidanci & Esin Partners
Fidanci & Esin Partners
Article

Anayasa Mahkemesi’nden Önemli Karar: İstinaf Başvurusunun Kabulü Hâlinde Temyiz Yolunu Kapatan Hüküm İptal Edildi

Anayasa Mahkemesi’nin (“AYM“) 2026/49 esas ve 2026/48 karar sayılı kararı (“Karar“), 21 Mayıs 2026 tarihli ve 33260 sayılı Resmî Gazete’de yayımlanmıştır. Karar’da AYM, 6100 sayılı Hukuk Muhakemeleri Kanunu’nun (“HMK“) 362. maddesinin (1) numaralı fıkrasının (a) bendini, “istinaf başvurusunun kısmen veya tümden kabulü hali” yönünden Anayasa’nın 13. ve 36. maddelerine aykırı bularak oybirliğiyle iptal etmiştir.
TurkeyGovernment, Public Sector
Fidanci & Esin Partners
Fidanci & Esin Partners