Turkish Personal Data Protection Authority Issues Warning On The Use Of Foreign-Based Messaging Applications By Public Institutions

The Personal Data Protection Authority (the "Authority") published its public announcement dated 29 January 2026, titled "Public Announcement on the Use of Foreign-Based Messaging Applications by Public Institutions" ("Announcement"). The Announcement draws attention to complaints and reports received by the Authority indicating that public officials employed by various public institutions have been compelled to use foreign-based messaging applications such as WhatsApp while carrying out administrative duties, and that instructions, directives, and official documents have been communicated and shared through such applications.

The Authority has emphasized that, in the provision of public services, ensuring data security under the Personal Data Protection Law No. 6698 ("DP Law") constitutes a core legal obligation alongside operational efficiency and speed. Referring to Presidential Circular No. 2019/12, the Authority reiterated that confidential or critical