Law on the Protection of Personal Data (Turkey) - KVKK

The Law on the Protection of Personal Data (KVKK) is Turkey’s primary data protection legislation regulating the processing, collection, storage, use, disclosure, and transfer of personal data. Enacted in 2016, the KVKK establishes obligations for data controllers and processors, provides individuals with rights over their personal information, regulates sensitive personal data processing, and introduces requirements for data security, transparency, consent, and accountability. The law is influenced by international privacy standards, particularly the EU General Data Protection Regulation (GDPR), and governs domestic and cross-border data processing activities.