Türkiye's First Cybersecurity Law Entered Into Force

On 19 March 2025, Law No. 7545 on Cybersecurity (the "Law") was published in the Official Gazette and came into force. Designed to enhance cybersecurity in Türkiye and provide robust protection against cyberattacks, the Law introduces comprehensive regulations that impose substantial obligations and responsibilities on public and private sector organisations, individuals, and all digital platforms. Its primary aim is to regulate the activities of these entities from a cybersecurity standpoint.

New Obligations and Regulations

Management of Cybersecurity Risks: Public institutions and private sector organisations are now obligated to ensure the security of their critical infrastructures in the field of cybersecurity. They are also required to conduct risk analyses to identify vulnerabilities. Furthermore, institutions must establish cybersecurity incident response teams and work towards enhancing the maturity of these teams.