Recent Development
On March 27, 2020, the Personal Data Protection Authority
("DPA") issued an announcement on data
processing activities during the COVID-19 outbreak in the scope of
the Law on Personal Data Protection
("Law"). The DPA provided guidance on
the data processing activities of employers and public authorities
during the COVID-19 outbreak, referencing the general principles of
data processing under the Law. The DPA's announcement is
available online here (in Turkish).
What's New?
General Principles and Compliance with the Law
The DPA stated that public and private organizations and
institutions have been taking numerous measures against COVID-19,
and that personal data processing is crucial and inevitable to
perform these measures. Accordingly, the DPA referred to the data
minimization principle and the general principles of the Law;
stated that data processing activities must be in connection with
the purpose of processing, be limited, and be
