PrivacyTerrain

Editorial caveat

Structured values summarize official materials for research and planning. They are reviewed by humans before publication and should not be treated as legal advice.

medium confidence, Needs a closer pass on transfer derogations, recent amendments, and regulator-driven operational nuance.

At a glance

Key presentation points

A compact summary of high-signal fields before the full structured record.

Effective statusin-force1 primary + 1 secondary • Reviewed 17/04/2026

Territorial scopeApplies to controllers and processors established in Turkey and foreign actors processing personal data of individuals in Turkey in relevant circumstances.1 primary + 1 secondary • Reviewed 17/04/2026

Requires legal basisYes1 primary + 1 secondary • Reviewed 17/04/2026

Maximum fineAdministrative fines vary by violation category and have increased substantially through revaluation.1 primary + 1 secondary • Reviewed 17/04/2026

Structured record

Regulation details grouped by topic

Each value keeps its field context, linked sources, notes, and review date together to avoid detached or ambiguous statements.

Identity

Effective status: in-forceSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: KVKK text (primary); KVKK Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.
Law status: activeSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: KVKK text (primary); KVKK Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.
Effective date: 2016-04-07Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: KVKK text (primary); KVKK Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.
Last amended: 2024-03-12Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: KVKK text (primary); KVKK Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.

Scope

Extraterritorial application: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: KVKK text (primary); KVKK Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.
Territorial scope: Applies to controllers and processors established in Turkey and foreign actors processing personal data of individuals in Turkey in relevant circumstances.Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: KVKK text (primary); KVKK Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.
Private sector coverage: Applies broadly to private-sector controllers processing personal data in or relating to Turkey.Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: KVKK text (primary); KVKK Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.
Public sector coverage: Public authorities are covered unless a statutory exemption applies.Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: KVKK text (primary); KVKK Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.

Definitions

Personal data definition: Personal data means any information relating to an identified or identifiable natural person.Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: KVKK text (primary); KVKK Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.
Sensitive data recognized: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: KVKK text (primary); KVKK Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.

Legal Basis

Legal bases: consent, statutory exception, contract necessity, legal obligationSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: KVKK text (primary); KVKK Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.
Requires legal basis: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: KVKK text (primary); KVKK Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.

Rights

Right of access: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: KVKK text (primary); KVKK Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.
Right to deletion: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: KVKK text (primary); KVKK Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.
Right to object: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: KVKK text (primary); KVKK Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.
Right to portability: NoSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: KVKK text (primary); KVKK Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.
Right to appeal: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: KVKK text (primary); KVKK Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.

Breach

Breach deadline (hours): 0Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: KVKK text (primary); KVKK Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.
Breach notification required: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: KVKK text (primary); KVKK Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.

Governance

DPO required: NoSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: KVKK text (primary); KVKK Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.
Impact assessment required: NoSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: KVKK text (primary); KVKK Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.
Records of processing required: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: KVKK text (primary); KVKK Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.

Enforcement

Maximum fine: Administrative fines vary by violation category and have increased substantially through revaluation.Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: KVKK text (primary); KVKK Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.
Private right of action: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: KVKK text (primary); KVKK Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.

Transfers

Cross-border transfer restricted: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: KVKK text (primary); KVKK Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.
Data localization required: NoSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: KVKK text (primary); KVKK Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.

Marketing

Cookie consent rule: Consent-driven cookie practice is shaped by KVKK guidance and related electronic communications rules.Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: KVKK text (primary); KVKK Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.

Official sources

KVKK textPrimary official law • en • html
KVKK Authority guidanceSecondary official material • en • html

Turkey