Data Protection Law in Turkey

Legal advice on the protection of personal data

Data Protection Law in Turkey

Companies processing personal data of customers, employees or business partners in Turkey must observe the requirements of the Turkish data protection act (KVKK). For internationally active companies, cross-border data transfers and the interaction with the European GDPR may also be relevant.

Contact Us

Companies processing personal data of customers, employees or business partners in Turkey must observe the requirements of the Turkish data protection act (KVKK). For internationally active companies, cross-border data transfers and the interaction with the European General Data Protection Regulation (GDPR) may also be relevant.

Dedeoğlu Partner helps domestic and foreign companies to structure their data processing activities on a sound legal basis and to implement the required data protection measures.

Advice and communication are available in English, German and Turkish.

Questions that frequently arise in data protection law

We review the existing processes, identify legal risks and develop solutions tailored to the company.

  • Which requirements of Turkish data protection law apply to the company?
  • Which privacy notices and consent texts are required?
  • Is registration with the VERBIS data controllers’ registry necessary?
  • Under which conditions may data be transferred abroad?
  • How should data breaches or requests from the authority be handled?

Data protection compliance

  • Reviewing data processing activities
  • Preparing privacy notices and consent declarations
  • Drafting internal data protection policies
  • Advice on the retention and deletion of personal data

VERBIS and data transfers

  • Reviewing and supporting VERBIS registration
  • Advice on cross-border data transfers
  • Drafting the required agreements and declarations
  • Aligning Turkish data protection requirements with the GDPR

Data breaches and proceedings

  • Advice on loss, disclosure of or unauthorised access to data
  • Support with statutory notification and information processes
  • Responding to requests from data subjects
  • Representation before the data protection authority and the courts

DATA PROTECTION FOR FOREIGN COMPANIES

We help foreign companies to adapt their business and data processing activities to Turkish data protection rules, with particular attention to intra-group data transfers, international IT systems and the interfaces between KVKK and the GDPR.

PERSONAL CONSULTATION

Would you like your company’s data protection processes reviewed or adapted to Turkish requirements? Tell us briefly about your business activity and the type of data processed. After an initial review we will let you know how we can assist you.

Phone: +90 212 266 8 777

Email: info@dedeoglupartner.com

Alternatively, you can fill in the consultation form on our website.

Would you like your company’s data protection processes reviewed or adapted to Turkish requirements? Tell us about your business activity and we will let you know how we can assist you.

Contact Us

Related Advisory

Practice Areas