Personal Data Protection Law
Number: 60-18
Date: May 09, 2018
The personal data we increasingly use in our work is now protected by law in Turkey. The Personal Data Protection Law introduces important rules we must comply with. The law also sets out mandatory principles to be followed in the processing of personal data.
Principles Determined by the Law
- Compliance with law and honesty rules,
- Being accurate and up-to-date when necessary,
- Processing for specific, clear, and legitimate purposes,
- Being relevant, limited, and proportionate to the purposes for which they are processed,
- Retention for the period prescribed by the relevant legislation or necessary for the purposes for which they are processed.
“Personal data processed before the publication date of this Law shall be brought into compliance with the provisions of this Law within two years from the publication date.”
All operations performed on personal data such as recording, storing, modifying, disclosing, transferring are defined as processing personal data.
For personal data processing procedures to be lawful, it is not sufficient to rely only on explicit consent or other exceptions foreseen in laws when obtaining data. Because the Law also lists other rules to be followed in the processing of personal data.
Contact Information
- Özgür GÜL
Phone: +90 532 413 23 63
Email: akdeniz@isis-turkey.com - Dr. M. Recai YILMAZ
Phone: +90 533 490 14 71
Email: recai.yilmaz@isis-turkey.com
Entry into Force of the Law
The Law was enacted with the number 6698 and published in the Official Gazette No. 29677 dated 07/04/2016 to protect fundamental rights and freedoms of individuals, especially the privacy of private life, in the processing of personal data, and to regulate the obligations of real and legal persons processing personal data and the procedures and principles they will comply with.