Data Protection in Compliant with

Turkey TDPA (KVKK)

Get the Best Data Protection for Turkey TDPA (KVKK)

With our guidance, your company can fortify data security measures, safeguard customer information, and establish a robust foundation for responsible data management under the TDPA framework.

What is Turkey TDPA (KVKK)? 
KVKK, namely the Law on Protection of Personal Data No. 6698, which was published in the Official Gazette No. 29677 on April 7, 2016 and entered into force, is a set of data protection regulations, as the name suggests. KVKK focuses on the obligations of businesses to protect personal data and privacy, and also regulates data related to data transfer outside of Turkey.
Personal Data Protection Law (KVKK)

The following are key ideas about the KVKK:

It is necessary to follow the law and good faith principles.
To ensure that data is correct and up to date as needed.

To process data for specific, certain, and legal reasons.

To have data that is confined and restricted to the processing goal.
To store as needed for processing purposes or as determined by KVKK.
Appointing an audit data protection officer is optional but highly recommended.

Registration in the Data Controllers Registry Information System.

Appointment of a Data Protection Representative (DPR).
Who is impacted?
The KVKK applies to all data controllers and processors who collect or process data from Turkey. This covers entities in Turkey, as well as any foreign natural or legal persons who process the personal information of Turkish data subjects.
What are the penalties for non-compliance 

Negligence and breaches in personal data protection impose significant legal and criminal obligations on businesses. For example, as of 2024, penalty of up to 946.308 TRY are imposed in the case of a breach of the disclosure obligation; sanctions of up to 9,463.213 TRY are imposed in the case of a breach of the VERBIS registration and notification obligation. If personal data are not destroyed within the prescribed time frame, imprisonment of up to 2 years is imposed, and in the case of criminal action, imprisonment of up to 4 years is enforced.

We fulfill your custom TDPA needs with our team of experts.

Also, we have a special personal data management platform for SMB sector.  KVKKobi is a personal data management platform designed in DPASS (data privacy as a service) model to help you comply with the current legislation in the most effective way and protect your company’s reputation. Click here to access KVKKobi web site. 

Contact Us Today 

Contact us today to learn more about our Turkey TDPA (KVKK) compliance services.  

Jurcom Sponsors 2024 ELI Annual Conference! Learn More