I. Introduction
Privacy notices and explicit-consent declarations are frequently combined under one text or checkbox in website registrations, mobile applications, employee forms, loyalty programmes, patient records and marketing processes. The Turkish Personal Data Protection Board addressed recurring forms of this practice in Principle Decision No. 2026/347 dated 18 February 2026, published in the Official Gazette dated 24 March 2026, No. 33203.
The separation of notice and explicit consent was not introduced in 2026. Since 2018, the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform has required separate processes where processing relies on consent. Board Decision No. 2018/90 also distinguished acknowledgment that a notice was read from proof of consent. Principle Decision No. 2026/347 consolidates this approach into concrete rules for forms and screens and expressly connects noncompliance to Articles 12 and 18 of Law No. 6698 on the Protection of
