Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 20 JULY 2026

Veri İhlali ve Doğuracağı Sonuçlar (1)

Gün + Partners
Gün + Partners
Contributor
Gün + Partners

Gün + Partners

We are one of the oldest and largest law firms in Turkey and are considered internationally to be...

View firm profile
Explore more from Gün + Partners

Turkey's data protection authority has introduced significant changes to data breach notification procedures, including a 60-day publication limit and new guidelines for data controllers. Understanding these evolving requirements and their implications for administrative penalties is crucial for organizations handling personal data in Turkey.

TurkeyPrivacy
Begüm Yavuzdoğan Okumuş
Begüm Yavuzdoğan Okumuş
Uğur Erkırlı
Uğur Erkırlı
Author LinkedIn connections

Kanun, veri sorumlularının ilgili veri ihlalinden haberdar olunur olunmaz mümkün olan en kısa sürede Kurul’a ve ilgili veri sahibine bilgi vermesini gerekli kılmaktadır. Kurul, 24 Ocak 2019 tarihli ve 2019/19 sayılı kararında (“Karar”), veri ihlali durumlarında uygulanacak kurallar ve izlenecek prosedürleri açıklığa kavuşturmuştur.

Kurul, ihlal bildirimlerinin zamanlaması bakımından GDPR yaklaşımını benimsemektedir ve Kanun’da yer alan “en kısa süre” ibaresinin veri ihlalinin tespit edilmesinin ardından 72 saat içerisinde olarak yorumlanması gerektiğini açıklamıştır.

Kanun ayrıca veri sorumlularının, maruz kalınan risk düşük olsun veya olmasın veri ihlalinden etkilenen veri sahiplerini tespit eder etmez en kısa sürede veri sahiplerine bildirimde bulunmalarını gerekli kılmaktadır. Kurul, anılan Karar’ında veri ihlalinden etkilenen veri sahiplerinin belirlenmesinden sonra yapılacak bildirimin süresi ile ilgili olarak belli bir süre öngörmemiş, makul olan en kısa süre içerisinde

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

Turkiye Introduces New Age Verification And Child Protection Requirements For Social Network Providers

On 10 October 2026, the Regulation on the Provision of Differentiated Services for Children and Age Verification by Social Network Providers (the "Regulation") was published in the Official Gazette. Issued by the Cyber Security Presidency, the Regulation introduces mandatory age verification, restrictions on children's access to social networks and additional safeguards for users aged 15 to 17.
TurkeyPrivacy
Balcıoğlu Selçuk Eymirlioğlu Ardıyok Keki Attorney Partnership
Balcıoğlu Selçuk Eymirlioğlu Ardıyok Keki Attorney Partnership
Article

New Regulations For Protecting Children On Social Media In Turkey Minimum Age, Age Verification & Parental Controls

While the widespread use of social media by children offers significant opportunities for communication and access to information, it also presents various risks, including exposure to harmful content, cyberbullying, online exploitation, and threats to the protection of personal data. These risks have increased the importance of legal regulations aimed at protecting children in the digital environment.
TurkeyPrivacy
ADMD/Mavioglu & Alkan Law Office
ADMD/Mavioglu & Alkan Law Office
Article

New Age Verification And Child-Specific Service Obligations Introduced For Social Network Providers

Turkey's new regulation mandates strict age verification and child-specific protections for social media platforms, prohibiting services to users under 15 and requiring segregated, privacy-enhanced accounts for those aged 15-17. Social network providers must implement parental controls, restrict targeted advertising and profiling, and establish transparent appeal mechanisms, with enforcement beginning November 2026.
TurkeyPrivacy
Moroglu Arseven
Moroglu Arseven
Article

Data Protection Law In Turkey (KVKK): Compliance Obligations For Businesses

This article examines Turkey's personal data protection framework under Law No. 6698 from the perspective of companies operating in, selling into or otherwise handling data connected with the Turkish market. It addresses the distinction between data controllers and processors, lawful processing, the information duty, the 2024 reform of special-category data and cross-border transfers, the 2025 VERBIS exemption update, data subject requests, breach response and enforcement.
TurkeyPrivacy
ONGUR & PARTNERS
ONGUR & PARTNERS
Article

KVKK Yurt Dışı Veri Aktarım Rehberi

6698 sayılı Kişisel Verilerin Korunması Kanunu’nun (“KVKK”) 9 uncu maddesi kapsamında kişisel verilerin yurtdışına aktarımlarının uygulanması ile Kişisel Verileri Koruma Kurulu’nun (“Kurul”) beklediği uygun güvenceler hakkında kamuoyunun aydınlatılması amacıyla Kişisel Verileri Koruma Kurumu (“Kurum”) tarafından 2 Ocak 2025 tarihinde Kişisel Verilerin Yurt Dışına Aktarılması Rehberi (“Rehber”) yayımlanmıştır.
TurkeyPrivacy
Barlas & Karabucak Law Firm
Barlas & Karabucak Law Firm
Article

Data Protection And Privacy Law In Türkiye Key Developments And Predictions - 2026

This comprehensive report examines the evolving landscape of personal data protection in Türkiye, analyzing regulatory developments, enforcement trends, and emerging compliance challenges through 2025 and into the first half of 2026. The analysis covers the Turkish Personal Data Protection Authority's expanding guidance framework, significant enforcement actions totaling TRY 352.5 million in fines, and critical regulatory shifts including new cybersecurity legislation and constitutional court decisions
TurkeyPrivacy
Gün + Partners
Gün + Partners
Article

New Pricing Communiqué Following The New Pricing Decision For Medicinal Products For Human Use: Increase Of The Euro Conversion Rate To 65% Of The Previous Year’s Average And Details Of The Pricing Incentive For The First Equivalent/Generic Product

Turkey's pharmaceutical pricing system undergoes a major restructuring with the publication of the New Pricing Communiqué on August 29, 2026, implementing significant changes including increased Euro/TRY conversion rates, incentive mechanisms for first generic market entry, and the introduction of value-based pricing concepts. The new regulations establish detailed provisions for special product categories while leaving certain implementation details to future secondary legislation.
TurkeyFood, Drugs, Healthcare, Life Sciences
Gün + Partners
Gün + Partners
Article

Copyright Law In TÜRKİYE Key Developments And Predictions - 2026

The rapidly evolving digital ecosystem has transformed copyright law from a technical field into a central topic of economic and societal debate. This comprehensive review examines significant developments in Turkish copyright law as of 2025, exploring how artificial intelligence, digital content creation, press publishing rights, and the sports industry are challenging existing legal frameworks and reshaping the balance between right holders and users.
TurkeyIntellectual Property
Gün + Partners
Gün + Partners