🇹🇷Türkiye

Türkiye regulates personal data through Law No. 6698

The Law on the Protection of Personal Data No. 6698, commonly called the KVKK, was published on 7 April 2016. The Personal Data Protection Authority and its Board supervise the regime. Important amendments to sensitive-data and international-transfer provisions took effect on 1 June 2024.

Operational points

The KVKK requires compliance with processing principles, a statutory processing condition, special-category safeguards, notices, data-subject rights, security and deletion or anonymisation when processing grounds cease. Controllers may need to register in VERBIS unless a Board exemption applies.

The statute does not contain a general GDPR-style DPO requirement, DPIA duty, child digital-consent age or fixed 72-hour breach deadline. These duties should not be added to a Türkiye checklist without a separate applicable rule or binding Board requirement.